Optimizing Active Directory: Approaches for Greater Simplicity and ConsistencyFebruary 12, 2019
The rising need for flexibility and ease of integration with other systems, either on-premises or in the cloud, is driving organizations to adopt a simpler directory structure. Ideally, Active Directory architecture, design, management and operations should be periodically reviewed and adjusted to keep up with the changes occurring in the larger enterprise. More often than not, however, such reviews happen in response to certain events — some of business nature, some related to changes in technology or products. The following events are most common drivers for Active Directory optimization efforts:
- Integration with Office 365 and Azure AD
- Mergers and acquisitions
- Projects to improve compliance and reduce risk
- Software upgrades
In response to these external drivers, Active Directory can be optimized in a number of ways. Here are a few AD optimization options:
- Maintain the current structure: The business goals can be achieved without making any significant changes to the Active Directory environment.
- Assimilate: Transfer users to the target Active Directory, and decommission the source Active Directory.
- Create a consolidated directory: Provide a single virtual or physical directory that combines data from multiple disparate directories.
- Migrate: Restructure Active Directory and migrate users and applications to the new structure.
- Implement data quality improvements: Eliminate outdated or incorrect information from Active Directory, and implement processes to maintain its data quality over time.
Simplicity is agility. Less complexities reduce risk, improve management efficiency and facilitate Active Directory integration with other identity repositories, identity governance and administration tools. Binary Tree can help you carefully.