• Home
• Company
• Support
• Products
• Success
• Partners

• login
• downloads
• contact us
• site map

Delegated, Role-based Services, Account Provisioning and User Self-service for Microsoft Active Directory and Exchange 2003, 2007 and 2010(beta)

1. The Challenge:  Complex Tools that Require ALL the "Keys to the Castle"
2. The Opportunity:  Web-based, "ZERO Rights", Unified Management
3. The Result:  Increased Security, Productivity and Peace of Mind
4. Very Quick Win.  Significant and Immediate ROI
5. Security and Regulatory Compliance
6. Account Management Tasks
7. Create Options
8. User Self-service Options
9. Top Questions:  Is eControl Right for You?
10. Three Powerful Modules
11. More Information

The Challenge:   Complex Tools that Require all the "Keys to the Castle"

Leverage the power of Active Directory and Exchange with eControl.  Many organisations running large or multiple Active Directory and Exchange systems struggle with account management, provisioning and user self-service tasks. Assigning system-wide permissions and allowing access to Microsoft Management Console or specific Task Pads in complex environments can create security concerns.

In essence, quite often, too many people end up with too many permissions - they end up with the "keys to the castle." With the wrong tool, with one misguided click of a button, a user account, mailbox, etc. is gone – vanished! Who needs the nightmare of trying to report who made what changes in the case of an external security audit? And just how often do you have to provide training to new Help Desk staff on how to use overly complex tools?  How much lost productivity is the result of trying to train non-technical staff to use complex tools to perform routine, everday tasks. Should a Help Desk Ticket really have to be created if a user forgets his password?  Why shouldn't the user be able to reset his own password?  In most cases, it's because of the complexity and decreased security related to providing these options.

There is an easier way!

The Opportunity:   Web-based, "ZERO Rights" Unified Management, Provisioning and Self-service

eControl 3 for Active Directory and Exchange. eControl delivers "ZERO Rights" unified management that empowers junior administrators, help desk operators, support staff, HR staff, department managers and even end-users to perform common tasks in Active Directory and Exchange – from a web browser.

These tasks include password self-service, enabling/disabling accounts, moving user accounts, resetting passwords, creating new users, creating groups, managing Exchange settings, managing distribution and group lists, unlocking intruder lockout and more.

The Result:  Increased security, productivity and peace of mind

With eControl, not only can you assign user self-service actions, you can delegate account and other object provisioning and management tasks to junior administrators, help desk operators, support staff and end-users. They will only be able to complete the tasks they have been assigned - only in the OUs you specify.

NO permissions. NO system rights. NO access to the file system. NO access required to Microsoft Management Console or other tools. NO Task Pads required

eControl's full audit trail enables administrators to keep a tight rein and provide full reports on account creation and modifications. Disabling and deleting orphaned and dormant accounts can be securely delegated to junior support staff. Administrators can enforce strong password policies and reduce the risk of regulatory exposure and security liability. eControl will help you change and manage a user's group memberships and other roles as her position changes within the organisation. eControl will improve help desk responsiveness, increase productivity, mitigate security risks and produce more accurate account data.

Very Quick Win:  Significant and Immediate ROI

eControl alleviates the need to assign user access rights and permissions. This allows you to focus on high-value IT business requirements instead of security details. And, for organisations embarking on a longer-term identity management strategy, eControl delivers a very quick win, significant and immediate ROI. For example, research shows that password self-service can save as much as $650,000 per year in a typical 10,000-user organisation. User account management consumes a significant proportion of overall IT productivity. Even a 20% efficiency gain is significant.*

* Source:  "What is User Life-Cycle Managment? And Why You Should Care," META Group, June 2004, p5.

Security and Regulatory Compliance

Account Change Management Audit Log and Password Change Notification is designed to enhance security and regulatory compliance of legislation such as:

• Sarbanes-Oxley
• Gramm-Leach-Bliley
• HIPAA
• FDA 21 CFR 11
• EU Directive 2002/58/EC
• PIPEDA

Top User Account Management Tasks

eControl is powerful and yet simple to use for Active Directory and Exchange environments. On average, eControl takes fewer than 30 minutes to install. And after 15 minutes of training, your non-technical staff will be able to perform the following user account management tasks:

Active Directory and Exchange Tasks Manage Account Password Enforce Strong Passwords Enable / Disable User Accounts Create User and Resource Accounts Create Security Groups Create Mail-enabled Groups Manage Group Memberships Manage Exchange Mail Groups Manage Exchange User Settings Mail Enable AD Accounts Move User Accounts Change Home Directory Location Update User Identification Information Manage Account Expiration Date ... and more

Create Options

eControl allows you to delegate the ability to create accounts, mailboxes, resources security groups, email-enabled groups and more.  New objects are created by filling out the web form associated with each create profile. You determine which create profiles can be accessed by which users. Only users with access to specified create profiles can create new objects - and only in those OUs you specify.  With eControl Create, your HR or department management staff can leverage the power of Active Directory and create objects after 10 minutes of training! 

User Self-service Options

eControl allows you to define user self-service options. The most popular option is user password self-service. Password self-service significantly reduces costs and user down time. Calls to the help desk for password resets decrease freeing up time and resources. Leverage the power of Active Directory by allowing users to populate their own AD values for licence plate numbers, mobile phone and pager numbers and other personal information.

Turn Exchange into a "Listserv".  Define email groups you want users to be able to subscribe to and unsubscribe from. Only those groups you have made "public" will be available to be chosen.  Allow users to subscribe to public "Monthly Health and Wellness", "For Sale","Wanted" or other mail lists.

Top Questions:   Is eControl Right for You?

1. Is IT or the help desk department sometimes the bottleneck in your User Account Management process?
   
2. Is your help desk unable to carry out certain account management tasks because of security risks?
   
3. Does your security department require account change management audit reports for Security Regulation compliance?
   
4. Are you looking to unify your management strategy and better leverage the power of Active Directory?
   
5. Are you managing multiple Active Directory domains?
   
6. Does your help desk run a number of different administration tools and applications?
   
7. Have department mergers or corporate acquisitions made your user account creation and management tasks cumbersome and complex? 
   
8. Tired of training your Help Desk Operators how to use Microsoft Management Console and other tools to carry out user and identity management tasks?
   
9. Concerned about the impact of a Help Desk Operator hitting the delete key on the wrong object or "poking" about your network to see what they can see?
   
10. Need to deploy User Self-Service or Password Self-Service for Active Directory and Exchange?
    
11. Are you being asked to manage and integrate more complex systems with fewer resources?
    

Three Powerful Modules

eControl Manage	Manage user accounts, distribution lists, groups, ZENworks applications and other directory objects—with NO administrator rights required! eControl offers granular control over the tasks and search contexts assigned to support staff. Front-line staff love the simplicity of managing accounts with eControl’s web-based interface.
eControl Create	HR and office staff can provision user accounts, email groups, security groups and more based on pre-configured create profiles. Profiles standardise object creation and ensure compliance with corporate naming standards, group membership and email account requirements. eControl delivers the ulimate simplified provisioning solution
Self-Service	Deliver user self-service functions for Active Directory and Exchange. Self-service functions include password changes, “forgot-my-password” challenge phrases and the ability to update demographic information. eControl turns Exchange into a "ListServ" by allowing users to subscribe to or unsubscribe from "public" email groups.

More Information

Evaluate eControl for 15 days »
System Requirements »
Remote Installation Requirements »
On-line Demo »
How to Order »