Software Solutions

Help Desk Delegation

Help Desks around the globe all face the same challenge when trying to delegate tasks in Active Directory: trying to minimize the permissions required for individual users, yet still give them access to do their job. This has proven to be difficult in any organization, no matter how many users you have. Even though Active Directory features a built-in Delegation of Control wizard that modifies permissions on objects in AD, it is still giving that user direct access to the network. On top of this, Administrators can also skip the wizard and give their technicians and Help Desk operators Domain Admin privileges on the network, opening the door to even greater risks and giving them full control of the entire domain. Finding a balance between privileges and permissions to operate the network is often very difficult when there are many users all interacting with the network.

The User Management Resource Administrator solves this problem by giving admins and technicians a user-friendly delegated form that performs operations in an efficient and secure manner. Administrators would construct User Management Resource Administrator scripts to handle an array of management operations, from resetting passwords to moving mailboxes and home directories. When a user needs to access one of those task scripts, then they can open User Management Resource Administrator Forms client and perform the task knowing that everything is being done in the background. These end-users and operators are not required to have administrative or delegated rights on the network, as the UMRA functions similar to a proxy server performing the task on their behalf.

This powerful model for delegation functions like an extra layer of security around Active Directory. It is protecting your I.T. department technicians and Help Desk operators from accidentally clicking on the wrong button, while also reducing the amount of human error by a large factor. Complex tasks can be streamlined, saving them time each time they use it.

A few examples of how the User Management Resource Administrator Forms & Delegation can impact the way Active Directory is managed are:

• Streamlining complex operations into a simple point-and-click interface knowing that all operations are being run in the background
• Eliminating human error when dealing with large tasks (creating new users, moving users from old server to new servers)
• Minimizing the number of actual Domain Admins on the network, increasing security over the entire domain
• Reducing the time required to carry out any network management task
• Offering non-administrators an easy way to interact with Active Directory