There are a number of ways to keep track of and audit the changes in your environment without going to the extreme of moving back to a centralized administration model. Administration tools like Quests ActiveRoles or NetIQs DRA offer that sort of granular logging and auditing right out of the box. You can do alerting with MOM if you get into the nuts and bolts of auditing.
Phil -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Rutherford Sent: Wednesday, October 20, 2004 7:13 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Centralized vs. decentralized administration I think the main reason which many companies are now facing is down to compliance. It is now becoming necessary for many companies to re-design AD to bring about a centralised model again. This is basically to ensure that head office knows about and has knowledge of details, such as - who is added to the domain, removed, etc. Rob ________________________________ From: [EMAIL PROTECTED] on behalf of Nathan Casey Sent: Wed 20/10/2004 23:40 To: [EMAIL PROTECTED] Subject: [ActiveDir] Centralized vs. decentralized administration Anyone have a good argument against decentralized administration in a single domain, multi site AD environment. Currently all user, computer, group, etc admin is handled by the IT dept. Now, we need to justify why we should NOT let users at the sites admin their own users, computer, groups, etc. For the most part the users at the sites that want to admin their own users have no AD admin experience. Any suggestions would be helpful Thanks Nathan List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ ======================================================================= Scanned for virus infection by Messagelabs ======================================================================= List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
