Bob's Identity Management Blog

"Anyone can hold the helm when the sea is calm." – Syrus Publilius

One of the great new capabilities new to ActiveRoles AD CMDLETS version 1.4 is the ability to define criteria for how you want to identify obsolete or inactive accounts. You define the criteria as an “InactiveAccountsPolicy” that can be called from the Get-QADUser cmdlet to list accounts matching the obsolete policy then delete, disable or if [...]

Most of the directory owners to which I speak, have for a number of years, been living with legal or regulatory compliance.  Most have followed a predictable pattern of first sweating out their initial audit then later rationalizing better ways to implement whatever compliance policy to which they must adhere for sustained compliance.  First Audits are [...]