First hit I had on Varonis I saw this- " DatAdvantage is priced based on the number of users; licenses for typical installations of one to 250 users start at $25,000." Maybe that is really representative, maybe not. It does look pretty cool nonetheless. Quest is not so expensive compared to that if I have to add a couple of zeros :-]
We actually had an offer to try their product in this space (Access Manager) for one year for free from one of their VPs, if we ever find the spare cycles it would be a great project. Just spent 3 days in a room with them and a bunch of our folks doing a POC looking at pulling our *NIX machines into AD with the QAS product...that was an interesting exercise especially from the *NIX admins perspective of going from maintaining >1K auth stores individually to a single identity & set of groups in AD. Thread hijack but if anyone has experience with any of the big players in that space (AD/*NIX integration & privilege mgmt) I'd love to hear opinions, on or offline is fine. --bob -----Original Message----- From: Michael B. Smith [mailto:[email protected]] Sent: Thursday, August 19, 2010 4:43 PM To: NT System Admin Issues Subject: RE: Finding unused/dead groups? Honestly, no clue. I've labbed with quite a few Quest tools, but the only ones I've actually used are the NetWare migrator and GroupWise migrator. For the SMORG space they tend to be inordinately expensive, and that's where I "play". Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -----Original Message----- From: Free, Bob [mailto:[email protected]] Sent: Thursday, August 19, 2010 7:32 PM To: NT System Admin Issues Subject: RE: Finding unused/dead groups? I wonder how that product compares with Quest's solution. -----Original Message----- From: Michael B. Smith [mailto:[email protected]] Sent: Wednesday, August 18, 2010 12:38 PM To: NT System Admin Issues Subject: RE: Finding unused/dead groups? I've got a customer that uses a tool by Varonis to track group usage. I'm ambivalent (not sure it provides equivalent value), but they like it, so that's all that matters. You might give it a look. NetWrix also has some tools in this space. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -----Original Message----- From: Paul Hutchings [mailto:[email protected]] Sent: Wednesday, August 18, 2010 3:35 PM To: NT System Admin Issues Subject: RE: Finding unused/dead groups? I never would have thought of that - I should be able to use admodify to bulk hide the groups from the GAL. Be interested in any other options simply as it's always good to know there's more than one way to skin a cat, but that sounds like a plan so thanks for that Brian. Michael - A typical example is a folder gets created for a project, group(s) gets created and assigned to the folder permissions, project dies and gets deleted, groups don't. Sometimes it's my fault, sometimes it's a subfolder of a top level folder so the users delete them - most of the time my naming structure makes it obvious if a group is still relevant, but it would be good to have a "cooling off" period before deleting. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
