RE: [ActiveDir] AD Administration Tools Suvey

[Ayers, Diane]

Title: Message

We are currently looking at our current tool set and are evaluating if we want to replace or stick with what we have.  We have been using Mission Critical's "Enterprise Administrator" since 1997 in our NT 4.0 environment.  Back in 1997 there were only two vendors that had an "enterprise" level delegate admin tool and in our opinion, Enterprise Admin was the best tool.  It has worked well in that setting and has enabled us to apply granular delegation to the domain structure and control the administrator role.  Since then EA and been acquired by NetIQ and is now know as Domain and Resource Administrator (DRA)   We are moving toward a native AD environment for aprox 20,000 folks and we are using the opportunity to re-evaluate the tools we have and are looking at NetIQs DRA and Fastlane's (Quest) Active Roles as well as others   Each tool has it strengths and weaknesses.  DRA is built around a "proxy service" and the service makes the changes on behalf of the user.  Active roles is built around the native ACLs of AD.   The bottom line for us is going to be how well the tools we integrate into our processes.    If you want to drop me a line, I'll give you my number and I can let you now where we are at in our evaluation process.  Send it to my work address at [EMAIL PROTECTED]   Diane Ayers Tech Lead, Active Directory Deployment San Francisco / Sacramento    -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Myrick, Todd (CIT) Sent: Monday, April 08, 2002 6:03 AM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] AD Administration Tools Suvey Our group is in the process of evaluating some 3rd party tools to assist in delegation and administration of our Active Directory technology. We are evaluating the products based on 6 key areas.   1.  Role / Trustee delegation 2.  Control View of resources 3.  Data Validation & Rule Sets 4.  Group Policy Management 5.  Reporting 6.  Web based administration   We are also evaluating Native Delegation vs Proxy based Delegation.   What I am fishing for from this community is some experiences and possibly some recommendations from this group on some of the Admin consoles you folks use.       Thanks   Todd