NOTE: This is the first is a series of articles I am writing as my organization moves from using IBM Domino to Office 365. For those who are moving from using IBM Domino as their email and directory, there are a number of things that one needs to think about for their Active Directory environment. … [Read more…]
The final piece of the puzzle is to now take the information that has been written to our LDAP store and push those changes to Domino. The blog article I mentioned in part one (where we got the modified password sync nsf from) uses TDI to accomplish this. Originally, that was our plan as well, … [Read more…]
As we were preparing everything for these changes, we ran across numerous references to custom IBM schema fields that were being used by the password sync process (when using LDAP as the store), but really very little detail about what the schema change did and how it was used. I don’t like to apply schema … [Read more…]
The next part of the process, now that we have a webservice we can call to change the HTTP and ID Vault password is to actually capture the password. To complete this, we will do two things: configure a new password capture tool on each read/write domain controller and do a schema update as a … [Read more…]
As an organization, one of our goals is to get to a single login. For us, this means that we want users to use the same username and password across various systems. Our primary authentication system is Active Directory, but we still have a number of legacy Domino databases around. To accomplish our goal, we … [Read more…]
One of the exciting new technologies we are now in the process of testing is called DirectAccess. DirectAccess allows a user/computer to be actively connected to the domain network no matter where in the world that user is. It doesn’t matter if the user is at Starbucks on their wireless network, at a hotel or … [Read more…]
One of the challenges in Active Directory is making sure that regular cleanup occurs in AD looking for inactive users and computers. In the past, for me, this has been an entirely manual process. It meant that I would take time once a quarter to generate reports, review the large number of users/computers and disable … [Read more…]
One of the challenges that we have in our organization is dealing with local administrator passwords. Through the years, we have used various models for our local admin password to various affect. One of the biggest issues we have run across, though, is that typically we have had one password applied across all of our … [Read more…]
I ran across this last night. This is some common group policy settings that are preset for certain scenarios such as mobile user, kiosk or multi-user. It has some good information about some policies that I may want to implement in our environment. I will have to look this over some more. Implementing Common Desktop … [Read more…]