AD Domain ServicesDirectory Objects & Identity Data

Aging analysis of user accounts

Aging Analysis of User Accounts A first-principles approach to reducing access risk, cleaning identity sprawl, and improving audit readiness. What “aging analysis” means: Aging analysis is the practice of classifying user accounts by time-based signals (e.g., last sign-in, last password change, time since creation, and time since last entitlement…
Read more
AD Domain ServicesDirectory Objects & Identity Data

How to handle user SID-related tasks

Handling user SID-related tasks: from first principles to field-tested operations Security identifiers (SIDs) are the nucleus of identity and authorization in Windows and Active Directory. Every access check, every token, every ACL decision hinges on these opaque strings. If you run AD at any real scale, you’ll spend real time handling user SID-related tasks: looking up SIDs…
Read more
AD Domain ServicesDirectory Objects & Identity Data

Mitigating cybersecurity risks in healthcare: A proactive approach with Cyber Essentials and user life cycle management

Mitigating cybersecurity risks in healthcare: A proactive approach with Cyber Essentials and user life cycle management As healthcare undergoes rapid digital transformation, the sector grapples with unprecedented cyber risks. This underscores the paramount importance of safeguarding patient data and healthcare operations. Our…
Read more
AD Domain ServicesDirectory Objects & Identity Data

Find a user's last logon time

Ensuring the security and maintenance of Active Directory user accounts is a critical aspect of system administration. One key piece of information is the last logon time for a user, which helps administrators identify inactive accounts and ensure the security of the network. In this guide, we will explore the process of finding a user’s last logon time in Active Directory using…
Read more
AD Domain ServicesDirectory Objects & Identity Data

How to provision user in Azure - Azure User Provisioning

Introduction   User provisioning in Azure is the process of creating, updating, and deleting user accounts in Azure Active Directory (Azure AD). Azure AD is a cloud-based identity and access management (IAM) service that helps organizations manage their users and devices. User provisioning can be done manually or automatically. Manual provisioning involves creating, updating, and deleting…
Read more