Innovation Technology Services

Active Directory Group management.

In this first iteration the Data Access Requester product integrates with the shell allowing 'Right Click' functionality for every user to be able to request access to folders on shared network drives. Requests are automatically emailed to the manager of the group(s) that provide the requested access and they are prompted to either approve or deny the request.

All requests are logged in a central MS SQL database allowing full reporting of the following:

1. Username that has requested access
2. Justification for requesting access
3. “Date time stamp” of the access request
4. “Date time stamp” when the access was granted
5. Group manager approving the request
6. UNC path that triggered the request for group membership
7. Computer name of the approver
8. IP address of the computer of the approver
9. Supervisor of the user submitting the request
10. Comments that may include miscellaneous error codes

Key Features

1. A central SQL database that logs all details by people requesting and approving access
2. Xml files allow customization of client, manager and service components
3. Group managers are emailed with the requesters details and prompted to approve or deny

Requirements

1. Microsoft Active Directory
2. Groups controlling access to data need to have the 'Managed By' field and 'Manager can update group membership' flags set.
3. Single MS SQL database required
4. Windows XP workstation or Windows 2003 server with .NET framework 1.1.4322

Frequently Asked Questions

1. I have a lot of groups and don't want to manually set the 'Managed By' fields, what options are there? We have scripting utilities that we can provide you with that makes this process very easy.
2. I don't have an Active Directory. What can you do for me? The redeveloped product that will replace Data Access Requester will provide a number of different authentication options include Netware and LDAP.
3. I don't have Microsoft SQL, can it use any other options? The redeveloped product will offer other ODBC compliant options for recording details.