Active Directory Pros and Cons скачать в хорошем качестве

Active Directory Pros and Cons

Let’s talk about Active Directory. Microsoft’s legacy solution has been at the heart of organizational access management for more than two decades. But many IT admins are now asking themselves: Is AD still the best option? Today, we’ll unpack this topic and give tips on selecting the best identity and access management technology for your team. Read the full post: https://jumpcloud.com/blog/active-dir... Learn more about JumpCloud: https://jumpcloud.com/ Build an infrastructure that supports the resources you need — with or without AD: https://jumpcloud.com/solutions/moder... Get started with JumpCloud: https://jumpcloud.com/get-started Resources and social media: -Blog: https://jumpcloud.com/blog -Community: https://community.jumpcloud.com/ -Facebook:   / jumpcloud.daas   -Twitter:   / jumpcloud   -LinkedIn:   / jumpcloud   #jumpcloud #activedirectory Transcript: Let’s start with Active Directory’s pros. AD provides admins with a centralized system. From here, they can enable and disable user accounts, define accessible resources, and set permissions. The system also helps them define how devices should appear, behave, and more. AD syncs very well with other Microsoft services. No surprises there. This makes lots of sense from a Microsoft perspective. After all, this provides a unified experience, simplifies administration, and drives the adoption of other services in the ecosystem. Group Policy Objects add another feather to AD’s cap. GPOs are instructions that can be applied to multiple users and computers. GPOs are the primary means through which admins make and enforce network-wide policies. Active Directory authorizes access using secure authentication protocols such as Kerberos and LDAP. It also enables admins to set security rules around password length, complexity, and expiration. AD makes admins more efficient and productive. Think of how much labor and time would go into setting policies on individual computers. With AD, the admin can simply create the policies, assign the computers to a specific group, and apply the policy to the group. Users also enjoy needing to log in only once to gain access to resources on the network; after all, no one enjoys having to memorize multiple usernames and passwords. AD can also be integrated with 3rd party apps for documenting events and preparing audit reports. Now, let’s look into AD’s cons. First, AD is expensive to set up. The technology’s costs go beyond hardware and licensing costs. IT managers must also consider expenses like rental fees for data centers and training costs for employees. AD is at its best only within an on-prem Microsoft ecosystem. So, if an organization typically uses cloud-based non-Microsoft tools for its business, it’s tough to control access to these tools using AD. Unfortunately, AD doesn’t play nice with non-Windows devices. This makes it difficult for admins to support users of all devices in a heterogeneous environment. Due to AD’s complexity, the network can easily be left exposed to threats caused by improper configurations. The fact that AD doesn’t natively support other devices often means that organizations must find 3rd party solutions. This drives up costs and creates tool sprawl. Plus, it increases the attack surface from which malicious actors could gain entry into the organization’s network. Lastly, Active Directory wasn’t built with Zero Trust in mind. Should an attacker steal a user’s credentials, there are no protections in place to thwart unauthorized entry. So what should IT teams consider when deciding whether to implement and maintain AD or not? Here are a few tips: Consider whether the team will cater solely to Windows users or a mix of cross-platform users. If you only have Windows users, then AD sure fits the bill. Otherwise, check out an OS-agnostic solution like the JumpCloud Directory Platform. Assess the extent to which your current infrastructure is on-prem. Then consider whether AD usage supports future goals. For example, if the goal is to migrate fully or partially to the cloud within a period, begin weaning the infrastructure off Active Directory sooner rather than later. Also consider the workforce location. As mentioned, AD works best in an on-prem environment. So, if your organization's workforce is primarily on-site, AD shouldn’t present much of a problem. Hybrid and remote teams are better served via cloud directories. And finally, if you haven’t already, check out JumpCloud. It’s a device-agnostic platform that presents a superior alternative to AD and accommodates the modern-day realities of work. That means users will receive support regardless of whether they are working at home, in an office, or at the coffee shop. And admins can secure and manage identities, devices, and resources that exist anywhere, from everywhere.