AD cleanup and domain migration

 

52:52Thomas Gomell11.03.2019

AD cleanup and domain migration.

Does it have to be that way?

The Active Directory is a system in the enterprise IT, which is subject to constant changes and adaptations: Accounts are produced, adjusted and deleted continuously or groups are created, interlaced, assigned rights and withdrawn.

Through the tool "Users and Computers" objects can be created and edited, but the underlying structures and large relationships remain hidden, working in the dark.

After a few years at the latest, the chaos becomes visible.
Diverse nested groups make administration more difficult and errors are increasing - many of them go unnoticed and are therefore particularly security-critical.

Once chaos - always chaos?
Does the whole domain have to be reset? Or are there clean-up processes that make the chaotic AD an efficient directory service again?

We present our approaches in the webinar and try to get to the bottom of the question when a domain migration is really necessary and if the existing AD can not be saved.