Finding Active Directory groups that have not been changed in a long time can reveal other candidates for thorough inspection and possible clean up. Indeed, if a group has not been changed it means that nobody was added or removed…
In well managed Active Directory every group has its purpose. As the number of groups grows and Active Directory spreads out globally it becomes challenging to manage all groups from one central authority. This is where you start thinking about delegation of group management. In the…
One way of getting rid of excessive groups is to find which groups have similar membership. The simplest case is when the list of direct members of a group matches another group’s list. Groups with same direct members are not…
This time we will see how we can uncover another type of toxic and potentially unnecessary Active Directory objects – circular nested groups. First let’s define what circular nested groups are. These are groups that include themselves by a virtue of…
It is a simple fact that as the time goes by Active Directory gets messy. Lack of automated provisioning and deprovisioning practices, employee turnover, Active Directory restructuring due to ongoing M&A activity are just a few reasons why. A good…
