GroupLocker

GroupLocker eliminates the manual tasks associated with maintaining Active Directory groups. With GroupLocker, you can automate updates to your AD Groups by specifying membership criteria in the dynamic update feature. This reduces your maintenance costs and eliminates the errors that can occur with manual updates.

To eliminate the manual tasks associated with managing Active Directory groups, enterprises must transition from a manual group management model to a dynamic group management model. To do so often leads to investments in expensive identity management software packages that take significant time and resources to implement.

A better option is to use the Zeva software product called GroupLocker. GroupLocker plugs directly into the Active Directory Users and Computers interface, so system administrators use a familiar interface. This is a major difference from other software packages that have their own user interface, which system administrators must learn. And GroupLocker is inexpensive compared to other tools!

GroupLocker provides the means to convert manual groups in AD to dynamic groups. A dynamic group is a criteria-based group that is automatically updated in real time through a set of rules that you define. Once implemented, group memberships will be automatically populated with no manual effort - it only requires a one-time configuration step to set up the rules.

The manual process to update Exchange Distribution Lists can also be automated. By using the dynamic update feature, automation of AD group memberships using GroupLocker can pass the equivalent updates to members in Exchange Distribution Lists.

How does GroupLocker work?

GroupLocker plugs directly into Active Directory. Once installed, you go to the properties of a group. If you look at the tabs, you will notice that there is now a new tab called Criteria. Under this tab, you select the checkbox that states that this group is a criteria-based group and then click edit.

Then you define the rules that make up the criteria. You simple pick an attribute such as name, office location, zip code, etc. Then you pick the criteria for that tab. For example, you can say office location is equal to US East. Once you click accept, anyone who has their office location set to US East will automatically be put into that group.

You can make the criteria as simple or as complex as you want. You can add one line for criteria or many lines. Moreover, you can decide if you want the members to be put in the group if they meet all of the criteria or just one of them. For example, if the criteria state that office location is equal to US East, but only if Account Name is present. If you select the ‘ALL’ button, only people located in US East and who have an Account Name will be added to the group. If you select ‘ANY,’ the user will only have to meet one of the criteria to be added to the group.

The best part of GroupLocker is the automatic updates where group configuration is a once and done process. Define your criteria for a group once and you are assured that the group will always contain members that meet those criteria. If the status of the member of a group changes and they no longer meet the criteria, they will be automatically removed from that group. If the person’s status changes to meet the criteria, they will be automatically added to that group.

In addition to the reduction in administrative effort, compliance with policy is improved. Compliance that is based on rules is easier to demonstrate than compliance based on manual updating. Since there are many actions that can be included in the criteria, such as terminations, hiring, promotions, changing locations, and many more, GroupLocker is smart enough to take these actions without manual updates.