Web-based User Account Management
for Microsoft Active Directory
- The Challenge: Complex Tools that Require ALL the "Keys to the Castle"
- The Opportunity: Web-based, "ZERO Rights" User Account Management
- The Result: Increased Security, Productivity and Peace of Mind
- Very Quick Win. Significant and Immediate ROI
- Security and Regulatory Compliance
- Top User Account Management Tasks
- Ten Questions: Is eControl Right for You
- Three Powerful Modules
- More Information
The Challenge: Complex Tools that Require all the "Keys to the Castle"
Many organisations running large or multiple Active Directory and Exchange systems struggle with user account management and user self service tasks. Assigning System Rights and allowing access to Microsoft Management Console or specific Task Pads in complex environments can create security concerns.
In essence, quite often, too many people end up with too many System Rights and permissions - they end up with the "keys to the castle." With the wrong tool, with one misguided click of a button, your Post Office is gone – vanished! Who needs the nightmare of trying to report who made what changes in the case of an external security audit? And just how often do you have to provide training to new Help Desk staff on how to use overly complex tools? How much lost productivity is the result of trying to train non-technical staff to use overly complex tools to perform routine, everday tasks. Should a Help Desk Ticket really have to be created if a user forgets his password? Why shouldn't the user be able to reset his own password? In most cases, it's because of the complexity and decreased security related to providing these options.
There is an easier way.
The Opportunity: Web-based, "ZERO Rights" User Account Management
eControl 2.5 for Active Directory. eControl delivers a "ZERO Rights" user account management tool that empowers junior administrators, help desk operators, support staff and even end-users to perform common user account management tasks in Active Directory and Exchange – from a web browser.
These everyday tasks include resetting passwords, creating new users, managing distribution and group lists and unlocking intruder lockout.
The Result: Increased security, productivity and peace of mind
With eControl, you can delegate restricted tasks to junior administrators, help desk operators, support staff and end-users. They will only be able to complete those tasks to which they have been assigned.
eControl's full audit trail enables administrators to keep a tight rein on data access and account changes. Disabling and deleting orphaned and dormant accounts can be securely delegated to junior support staff. Administrators can enforce strong password policies and reduce the risk of regulatory exposure and security liability. eControl will help you change and manage a user's group memberships and other roles as her position changes within the organisation. eControl will improve help desk responsiveness, increase productivity, mitigate security risks and produce more accurate user account data.
Very Quick Win. Significant and Immediate ROI
eControl alleviates the need to assign user access rights and permissions. This allows you to focus on business requirements instead of security needs. And, for organisations embarking on a longer-term identity management strategy, eControl delivers a very quick win, significant and immediate ROI. For example, research shows that password self-service can save as much as $650,000 per year in a typical 10,000-user organisation. User account management consumes a significant proportion of overall IT productivity. Even a 20% efficiency gain is significant.*
* Source: "What is User Life-Cycle Managment? And Why You Should Care,"
META Group, June 2004, p5.
Security and Regulatory Compliance
Complete Account Change Management Audit Log and Password Change Notification is designed to enhance security and regulatory compliance of legislation such as:
- Sarbanes-Oxley
- Gramm-Leach-Bliley
- HIPAA
- FDA 21 CFR 11
- EU Directive 2002/58/EC
- PIPEDA
Top User Account Management Tasks
eControl is powerful and yet simple to use for Active Directory and Exchange environments. On average, eControl takes three hours to install and configure. After 20 minutes of training, your non-technical staff will be able to perform the following user account management tasks:
| |
Active Directory and Exchange Tasks
- Manage Account Password and Strong Password
- Enable / Disable User Accounts
- Manage Group Memberships
- Manage Exchange Mail Groups
- Release Intruder Lockout
- Create User Identification Information
- Manage Account Expiration Date
|
Ten Questions: Is eControl Right for You?
- Is IT or the help desk department sometimes the bottleneck in your User Account Management process?
- Is your help desk unable to carry out certain account management tasks because of security risks?
- Does your security department require account change management audit reports for Security Regulation compliance?
- Are you running multiple Active Directory and Exchange domains?
- Does your help desk run multiple user management tools?
- Have department mergers or corporate acquisitions made your user account creation and management tasks cumbersome and complex?
- Tired of training your Help Desk Operators how to use Microsoft Management Console to carry out user and identity management tasks?
- Concerned about the impact of a Help Desk Operator hitting the delete key on the wrong object or "poking" about your network to see what they can see?
- Need to deploy User Self-Service or Password Self-Service for Active Directory and Exchange?
- Are you being asked to manage and integrate more complex systems with fewer resources?
Three Powerful Modules
More Information
Evaluate eControl for 30 days »System Requirements »Remote Installation Requirements »On-line Demo »How to Order »
