{"id":10220,"date":"2018-11-15T10:53:50","date_gmt":"2018-11-15T09:53:50","guid":{"rendered":"https:\/\/www.tranquil.it\/active-directory-for-your-iam\/"},"modified":"2025-07-18T10:59:12","modified_gmt":"2025-07-18T08:59:12","slug":"active-directory-for-your-iam","status":"publish","type":"post","link":"https:\/\/www.tranquil.it\/en\/active-directory-for-your-iam\/","title":{"rendered":"Active Directory for your IAM"},"content":{"rendered":"

[et_pb_section fb_built=”1″ _builder_version=”4.27.4″ background_color=”#009EBD” custom_margin=”0px||” custom_padding=”30px||0||false|false” hover_enabled=”0″ global_colors_info=”{}” background_enable_image=”off” sticky_enabled=”0″][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|40px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_post_title featured_image=”off” text_color=”light” _builder_version=”4.27.4″ text_orientation=”center” hover_enabled=”0″ global_colors_info=”{}” meta=”off” sticky_enabled=”0″][\/et_pb_post_title][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.16″ custom_padding=”0|0px|0|0px|false|false” global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|39px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

At Tranquil IT, we are Samba Active Directory experts and systematically advise our clients on the implementation of an AD. Why is Active Directory your ally in everyday life? We will try to explain it to you.<\/p>\n

Managing the authentication of its users on its network is nowadays at the heart of concerns, particularly in terms of cybersecurity. You store sensitive data on your network, and you don’t want anyone to be able to access it. It is therefore crucial to set up Identity and Access Management (IAM) on your fleet. To do this, you must first make an inventory of your resources for understanding your information system<\/a> as a whole. Once you know your resources, you need to define who has access to which on your network. In short, you need to define your IAM. To set up your IAM, you will need secure and reliable tools. We help you today to better understand what these tools are, and their advantages and disadvantages.<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|40px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

Active Directory: a complete solution<\/h2>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”3_5,2_5″ _builder_version=”4.16″ custom_padding=”40px|0px|40px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”3_5″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

General<\/h3>\n

Active Directory is a set of interconnected tools to centralize<\/strong>, manage<\/strong>, and authenticate users and computers<\/strong> of a domain. With Active Directory, you can organize your infrastructure into a main domain\u00a0<\/strong>segmented into Organizational Units<\/strong> (OU) that group objects (users, printers etc…). This organization allows you to apply a global security policy on your entire fleet, while applying finer strategies on your OU.<\/p>\n

By doing a little more research on the subject, you will certainly find that Microsoft Active Directory also allows you to create several hierarchical domains, with approval relationships between each of them. Caution, this practice is not recommended<\/strong>. Approval relationships will complicate the management of your infrastructure and especially the auditability of your informations system.<\/p>\n

Active Directory is the heart of your computer network. It lists workstations, servers, users, printers, etc. Active Directory also allows you to apply your security policies to your fleet using GPOs (Group Policy Objects).<\/p>\n

Active Directory is based on the protocol Kerberos<\/strong>, which allows you to have secured connections. Kerberos is based on a system of authentication keys<\/strong> and tickets, thus allowing the security of the authentication<\/strong> on your fleet. By authenticating, the client will obtain a temporary connection ticket, allowing him to access other services (e.g. file server, proxy server, business application, etc.) <\/em>without entering his login and password again.<\/p>\n

[\/et_pb_text][\/et_pb_column][et_pb_column type=”2_5″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_image src=”https:\/\/www.tranquil.it\/wp-content\/uploads\/schema_ad_ou_en.png” alt=”Active Directory diagram” align=”center” align_tablet=”center” align_phone=”” align_last_edited=”on|desktop” _builder_version=”4.16″ global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|40px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

Our Expert Advice<\/h3>\n

[\/et_pb_text][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

Active Directory is a powerful set of tools that allows you to properly manage your users’ rights. At Microsoft, this technology is expensive because you have to buy CALs (Client Access Licenses) to use the Active Directory service. We strongly recommend that you use Samba-AD<\/strong>, which is the Open Source alternative<\/strong> to Microsoft Active Directory. The use of Samba Active Directory is free of charge<\/strong>, and management is done via Windows RSAT in the MMC<\/strong> console to facilitate the administration of your network. Thus, Samba offers only advantages.
Tranquil IT is recognized as a Samba Active Directory expert in Europe and we have executed more than 270 audit, skills transfer, migration, and domain merger projects. Our experience of more than 12 years allows us to know the majority of migration scenarios.<\/p>\n

[\/et_pb_text][et_pb_button button_url=”\/en\/contact\/” button_text=”More information” _builder_version=”4.27.4″ custom_button=”on” button_bg_color=”#009EBD” button_border_width=”0px” background_layout=”dark” hover_enabled=”0″ global_colors_info=”{}” button_bg_enable_color=”on” sticky_enabled=”0″][\/et_pb_button][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|40px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

There are also alternative solutions to Active Directory to manage the identification and authentication of your users on your fleet. You may have already considered using the following solutions, but we do not recommend using them based on our experiences and knowledge. Here is what we have learned from these experience as sysadmins.<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|40px|0|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

The Workgroup: simple but not scalable<\/h2>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”3_5,2_5″ _builder_version=”4.16″ custom_padding=”40px|0px|40px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”3_5″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

General<\/h3>\n

A workgroup is a set of workstations under Windows belonging to the same group. The workgroup does not require a server to manage the workstations since the configuration is done on each workstation independently<\/strong>. Thus, you will have to go to each computer in your fleet to configure it. The same applies to the management of users for whom you will have to create an account on each computer<\/strong>\u00a0that they are likely to use. This mode of operation is convenient for very small organizations, as it does not require centralization of information on a dedicated server. No specific skills are required to set up a workgroup within a company, so if your company is composed of only two computers , you can run them in a workgroup. Beyond two positions, the workgroup is to be avoided<\/strong>. You will quickly be overwhelmed by the growing number of workstations, and your network will not be secure.<\/p>\n

[\/et_pb_text][\/et_pb_column][et_pb_column type=”2_5″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_image src=”https:\/\/www.tranquil.it\/wp-content\/uploads\/schema_workgroup.png” alt=”Workgroup diagram” align_tablet=”center” align_phone=”” align_last_edited=”on|desktop” _builder_version=”4.16″ global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|40px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

Our expert advice<\/h3>\n

We do not recommend a workgroup<\/strong> organization because it provides very few benefits in relation to the obstacles to be overcome. The workgroup is a temporary organization that will be useful for the creation of your company, but you will quickly need to replace it with a more appropriate solution such as Active Directory<\/strong>. Too often we see system administrators overwhelmed by the management of their infrastructure because of the workgroup. Conclusion: do not choose the workgroup<\/strong>, whatever your reasons.
\n[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.16″ custom_padding=”40px|0px|40px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]The +
\n[\/et_pb_text][et_pb_text _builder_version=”4.16″ text_font=”||||||||” link_font=”||||||||” ul_font=”||||||||” ol_font=”||||||||” quote_font=”||||||||” header_font=”||||||||” header_2_font=”||||||||” header_3_font=”||||||||” header_4_font=”||||||||” header_5_font=”||||||||” header_6_font=”||||||||” global_colors_info=”{}”]<\/p>\n