Self-service portal and the comprehensive management of Active Directory in the City of Warsaw

Introduction:

Warsaw City Hall encompasses 18 districts that are located in the area of 517 km, which supports 1.8 million residents. The office employs close to 7500 employees.

• The office has its own infrastructure, which consists of 270 servers including 20 domain controllers.
• It consists of 18 organizational units (districts).
• The infrastructure is managed by 5 server administrators, 4 network administrators, and 40 AD employee resource managers.
• The domain has over 4,500 active user accounts.

Resource working on Active Directory accounts optimally utilised:

Environmental management of AD’s complex structure posed a huge challenge to the IT team. Access request tasks such as unlocking accounts, reset passwords of AD user accounts, took up a considerable part of their time. This situation prevented implementation of advanced administrative tasks and limited the growth of the organization.

To solve this problem, organizational changes were implemented, combined with implementation of tools supporting new division of tasks.

The new division of tasks included:

• Transfer of minor administrative tasks in AD to administrators of individual business areas of the city
• Transfer management of passwords and data in AD to helpdesk technicians or users themselves

The new division of tasks included (Contd):

• Notifying users about the impending expiry of the password in AD
• The possibility of self-change passwords and unlock user accounts
• The possibility of self-editing of user data in AD
• The possibility of auditing changes in AD, including in groups and administrative units
• The ability to quickly identify the source of attack if break in to the domain is detected
• Polish user interface

About ADManager Plus

ADManager Plus is an identity governance and administration (IGA) solution that simplifies identity management, ensures security, and improves compliance. With ADManager Plus, manage the user life cycle from provisioning to deprovisioning, run access certification campaigns, orchestrate identity management across enterprise applications, and protect data on your enterprise platforms with regular backups. Use over 200 reports to gain valuable insights into identities and their access rights. Improve the efficiency of your IGA operations with workflows, automations, and role-based access control policies. ADManager Plus' Android and iOS applications help with on-the-go AD and Azure AD management. For more information about ADManager Plus, visit manageengine.com/products/ad-manager/.