Netware to AD then big neglected mess

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Hi
I'm going to attempt to bring the AD setup at my company inline with the rest of the world. My proposal has been accepted and everything and everyone planned and nicely on board. My gift to them before I leave in August I guess

One thing though. I need to find a tool that can give me info about groups. I.E. whether they're used or any info that could be useful for that matter.
As my company migrated from netware years ago with little care for AD or its capabilities the structure is a mess and no-one really knows what many of the groups do. Groups have been created willy nilly seemingly with an ou for just about everything and everyone.
Documentation only really kicked in when I came on board.

The netware migration adds extra complexity as it appears that during the migration it took netware equivelant of OU's and turned them into groups with a $ in front. Never seen this before as I've never been in a netware environment

We don't use Exchange which could have been a factor. Most of our other technologies such as dns are all linux driven. For this reason there has always been a sense that the MS stuff (AD included) was a necessary evil just for desktops and some server related stuff. Very messy

Anyone else worked somewhere like this? Any advice?

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

We have netware at our place, and I do understand that a migration is tricky to say the least, my advice to you is borrow a tardis go back to the time of the migration and get them to do it properly and actually look at the results they are getting rather than next next finish!

Sounds to me like it would be easier to do a bit of weekend double bubble, blast away the current mess and start again afresh.

Sorry nothing helpful here but I feel your pain and I'm sure someone will have a tool tucked away for tracing what groups do.

 

Thats pretty much what I'm doing.Its been a slog just getting the proposal done and accepted. Luckily we have very few linked GPO's.

Looking for something to help me interrogate the setup and pull off alist of groups with members and dependancies etc
I'll be trying to find something this evening. Just thought I'd throw it out there in the hopes someone has had to do a similar investigation

 

There was an ad beside your post maybe that will be of use

http://www.manageengine.com/products/ad-manager/active_directory_group_reports.html

 

Maybe I should stop blocking ads