Microsoft Active Directory Reviews

Commonly, we engage in three key use cases. The first involves upgrading customer’s outdated directories like 2008 or 2012 to newer versions for improved structure. The second revolves around creating a hybrid setup with Office or Azure cloud, aiming for single sign-on across both. Lastly, we often tackle restructuring situations due to mergers or acquisitions, where directory structures must be unified into a shared infrastructure. These are the typical scenarios we handle in our projects.

One noteworthy aspect we discovered is the ability to exercise tight control over systems, specifically Windows PCs. This pertains to the management of policies, usage patterns, and user access on these devices, particularly within the framework of Active Directory which is extremely well thought. This actually works better with on-premises solutions. However, as the global trend shifts towards cloud and hybrid environments, Active Directory and its use is diminishing. Yet, it hasn't entirely lost its relevance and remains a presence that cannot be entirely disregarded.      

Typically, it depends on the customer's situation. If the customer operates in smaller locations where most PCs are in a common location, we usually aim to consolidate the directory infrastructure for easier maintenance. However, for distributed setups spanning multiple countries, configuring multiple sites becomes necessary and more intricate to handle. Our objective is to minimize the number of sites, simplifying operations for IT administrators and reducing errors. Mistakes in Active Directory can be costly for organizations, as disruptions can occur rapidly.

Moreover, when it comes to hybrid single sign-on across various applications, Microsoft hasn't put forth significant effort. Single sign-on has become a challenge for many customers who utilize diverse solutions beyond Microsoft products. While implementing single sign-on is relatively straightforward in the Azure cloud, it's considerably more complex when dealing with the local Active Directory. This presents a big challenge for many of our customers.

I have been working with Microsoft since 2000 and was a part of the Microsoft Active Directory Development team in Windows.

The stability and effectiveness of the setup depends on its design consideration of future growth. For instance, if a company starts with a thousand PCs but foresees expansion to ten or fifteen thousand PCs over five years, the solution should involve adding servers rather than restructuring the entire network. Unfortunately, we often find that this foresight is lacking in many cases. The initial design should be though-through with growth in mind to ensure scalability and stability.

Active Directory was an extension of the Windows NT infrastructure and wasn't designed for extreme scalability. It was intended for organizations with around five to six thousand PCs.

However, as organizations grew to more than twenty-five or thirty thousand PCs, the complexity of managing it increased significantly. Especially when managing across different countries or regions, the complexity could lead to errors, issues with patches, and other problems. For large organizations, we often suggest a hybrid solution involving Azure Directory. This way, local Active Directory is still present, but there's less dependency on it and more reliance on the cloud. Cloud solutions like Azure offer virtually limitless scalability compared to local setups constrained by server and network infrastructure.

We have a technical support team in place. In most Active Directory cases, the customers have external support from vendors. In that case, our observation is that if the initial setup is executed well and the system operates smoothly, there are fewer and simple user issues. The maintenance tasks remain minimal.

In the case of Microsoft vendor support, we have extremely poor support quality in our interactions with numerous customers. The received support has been lacking in effectiveness, largely due to the practice of assigning relatively inexperienced individuals who are learning as they go. Dealing with such a complex infrastructure as an active directory, experimenting can worsen the situation.

Certainly, we have worked with Novell's Directory Infrastructure, which initially outperformed Microsoft's Active Directory. However, Microsoft rapidly closed the gap and swiftly gained prominence, and became one of the directories that could manage PCs

NetWare emerged as an easy-to-deploy and manage solution with good stability. The Windows NT infrastructure or Active Directory required many servers or just one server. The NT domain was less stable and based on a single server which had a lot of issues and could bring down the entire network. However, Microsoft addressed this concern in subsequent versions, effectively eliminating the problem.

When dealing with a new directory structure, the process is generally straightforward and clear. The approach depends on the organization's desired business rules. In cases of restructuring, the level of complexity varies based on the type of restructuring, whether it involves straightforward consolidation or the amalgamation of two distinct organizations. Rather than rating, the most complex scenario arises during the restructuring of directories, particularly when merging two companies or distinct structures. The complexity arises from the case to simplify and bring the rules on the same ground from each entity into a unified set suitable for the new organization. In my view, these projects have posed one of the most difficult cases.

For a fresh setup, the server infrastructure typically requires a few days or even less. The server setup is generally straightforward, but the time-consuming part lies in manually joining the PCs to the domain, as there isn't a fully automated method for it.

Active Directory is an expensive solution, primarily due to Microsoft's licensing model. This licensing approach includes paying for server licenses as well as for each computer that connects to it. However, when working with the Azure cloud, there is no cost for the server. This is profitable and one of the main reasons why Azure Cloud and other cloud-based solutions are being used more. 

There are certain scenarios where an Azure or cloud-based system might be unsuitable. For example, industries like power plants or government agencies might have restricted cloud connectivity due to regulatory or security concerns. In such cases, the utilization of Active Directory becomes the choice for managing on-premises infrastructure, as cloud isn't feasible option.

I would rate the overall solution an eight out of ten.

We use Microsoft Active Directory to manage users, computers, servers, and group policies.

It is easy to use and configure. It is easy to understand all the components as well.

The product's premium support services are expensive. It could be better. 

We have been using Microsoft Active Directory since 2008.

We didn’t encounter stability-related issues with architecture.

It is a scalable product. We have 20 administrators to manage multiple sites and 3000 users for Microsoft Active Directory.

We used Microsoft premium support earlier. It was expensive, and we had to pay extra for a complex issue. Now, we take help from local support partners with access to different areas.

We receive help from Microsoft partners for installation.

Microsoft Active Directory is the product that is most used around the world. So we follow that. We are a joint venture between national companies and international companies. They already use Microsoft; thus, we opted for the product.

I recommend Microsoft Active Directory to others and rate it an eight out of ten.

We use the solution as a user repository for window servers and platforms. Also, we have Line App platforms, actively using Line Asset Align to host our account and claim access based on active directory code.

The solution's most valuable feature is its ability to plan and manage different policies and functionalities.

The solution's price could be better.

I have been using the solution for more than ten years.

The solution is relatively stable. There are no issues of stability right now.

The solution is easy to scale. Our entire enterprise uses it.

The solution's technical support is good if you purchase the premium service.

Positive

Microsoft Active Directory is quick and easy to install. As for the deployment, it is a matter of a few hours. It takes about one or two engineers to deploy. Also, as for maintenance, one person is enough. The patching can be configured automatically.

We purchase the license for the solution on a yearly basis. However, they have converted the licensing model into a subscription. But it is worth the money.

There are no issues in terms of the performance and configuration of the solution. It is user-friendly and has a lot of UI features. Also, they are about to deploy new AI-based features.

Microsoft offers higher licenses as well. Thus, I advise others to select the licenses that fit their company's requirements. Otherwise, they will end up paying more.

I rate the solution a nine out of ten.

We use the solution to control environments for different servers.

The solution's most valuable feature is access control and integration with different applications.

The solution is complicated to navigate. We encounter issues while changing the settings. They should improve these particular features.

We have been using the solution for seven or eight years.

The solution is relatively stable.

It is a scalable solution. We can create multiple active directories using it.

The complexity of the solution's initial setup process depends on the environment. It takes a couple of weeks for simple setups and around a month for complicated structures.

We implement the solution with the help of our in-house team.

We have to purchase a license for the solution.

I rate the solution a nine out of ten. It works well in terms of functions and regular backups of the configuration.

I use Microsoft Active Directory for user and computer management.

Microsoft Active Directory implementation allows us to save time for user management. Single sign-on with enterprise applications improves our security.

The most valuable features of Microsoft Active Directory are the management of user and group policies.

The DNS services could improve in Microsoft Active Directory.

I have been using Microsoft Active Directory for approximately 18 years.

Microsoft Active Directory is highly stable.

I rate the scalability of Microsoft Active Directory a ten out of ten.

The solution is scalable.

We have approximately 700 people in 90 countries using the solution in my company.

We create user accounts and policies using the solution. We do not touch it often.

I rate the scalability of Microsoft Active Directory a ten out of ten.

We have our own expertise and did not communicate with customer service about this solution.

I did not use another similar solution to Microsoft Active Directory.

The initial setup of the solution is easy but needs good planning, sometimes the environment can cause challenges. The full process takes a few hours. 

The migration from workgroups to the current infrastructure took approximately six months.

The number of steps taken to implement the solution depends on the environment of the deployment. For example, how the users work, and how many offices can determine the difficulty and steps taken for the implementation.

I rate the initial setup of Microsoft Active Directory a nine out of ten.

We did the implementation of the solution in-house with three administrators.

We do not calculate the ROI but think it is worth the money.

The price of Microsoft Active Directory could improve. We pay annually for the solution.

I rate the price of Microsoft Active Directory a seven out of ten.

We evaluated other options before choosing Microsoft Active Directory, such as Linux-based solutions. I was familiar with Microsoft Active Directory and comfortable and this is why we are using it.

We use three administrators for the maintenance of all infrastructure including the solution.

I rate Microsoft Active Directory an eight out of ten.

I am using Microsoft Active Directory for tracking PCs on the domain, enabling them when they drop off, changing the PCs, and moving them into the organizational unit depending on the department and location.

The most valuable feature of Microsoft Active Directory is the ability to search for computers and users. While I do not have administrative privileges to reset passwords, I can view user information such as department, and communicate with someone who can make the changes.

There has been a change in the layout of the user information. Previously, I had to go to properties to view the information, but now it is displayed directly below the search results. It takes some time to get used to.

I have been using Microsoft Active Directory for approximately four years.

The solution is highly scalable.

I rate the stability of Microsoft Active Directory a ten out of ten.

The solution is scalable. You install it on any regular PC. It doesn't have to be a server, it can be a client. As I downloaded it or added it as a feature, I can use it right away.

I use the solution often.

I have not needed to use the support from Microsoft Active Directory.

The initial setup of Microsoft Active Directory is straightforward. I appreciate the graphical user interface (GUI) that is provided. There are two methods for setting it up, one is downloading it from the Microsoft website, and the other is adding it as a feature through the "Programs and Features" menu. I prefer the GUI as it is more visually appealing and easy to navigate, compared to the other method which is more text-based.

Active Directory is built-in into Microsoft Windows 10. I'm not an administrator and would not be involved in purchasing decisions for new versions of the software. I have only used the client portion of it, I do not know if there is a cost to using the solution.

My suggestion to others is they should learn what they need to use Active Directory for. I have experience in creating users in the past, but my role here is different and I don't handle that task. However, I still use Active Directory to communicate with other groups about what a user requires. It is a versatile tool and you can accomplish many tasks with it. It is best to figure out what you need and proceed accordingly.

I rate Microsoft Active Directory a ten out of ten.

We use Active Directory as a single sign-on when integrating it into applications.

Audit, authentication and authorization are the best features.

There is room for improvement. Microsoft is always working to improve their solutions and features.

It is a stable solution. Microsoft Active Directory is the bread and butter for Microsoft, so they're always working on improvements.

It is a scalable solution. Our organization has more than 45,000 users and nearly 300 users in our IT sector. We have a dedicated team for maintenance and segregate responsibilities into different departments.

We always use tech support from Microsoft. If we can solve it internally by ourselves, we do, but if there are other issues related to Active Directory, we create a ticker and reach out to them. I rate the technical support an eight out of ten.

Positive

The initial setup is not complex but depends on the organization's policies.

I rate this solution an eight out of ten.

My company uses Microsoft Active Directory as an identity and access management solution. The tool is used for its authentication capabilities in my company.

The most valuable features of the solution are its capabilities in areas like authentication and authorization, which include aspects like configuring permissions on folders and assigning permissions to security groups configured in Microsoft Active Directory.

I feel that Microsoft Active Directory is a superior solution to the other products available in the market.

Microsoft Active Directory fails to provide MFA. MFA, which is also known as multi-factor authentication on top of the password and username, is what I would like to see in the product's future releases.

I have been using Microsoft Active Directory for more than ten years.

The solution's technical support is good.

The product's initial setup phase was straightforward as it can be done within the operating system, after which you can take care of the configuration part to complete the setup process.

The solution is deployed on a hybrid cloud model.

Microsoft Active Directory is an excellent product.

I rate the overall tool a ten out of ten.

We only use Active Directory in my location for login purposes. We give permissions to file servers.

The most valuable feature is the configured appliance system in Hypervisor. We find Active Directory to be simple and effective. We mainly use it for file servers and user security. We don't utilize many advanced features.

The initial setup should be easier. It's complex and has replication and synchronization issues.

The technical support team does not give prompt responses.

I have been using the solution for the last four years.

It is a stable solution as there are no crashes or downtime. I rate it a ten out of ten. It is very good performance-wise.

It is a scalable solution. In my location, we have a total of 46 users. I rate it a ten out of ten.

The technical support team is not good as they do not provide prompt support. I rate them a five out of ten.

Neutral

Active Directory's initial setup is complex because, for some parts, like replications or synchronization, there are some problems that need to be verified. 

There is an expert-level requirement, and we are not experts. So we speak to Microsoft's support, but they are also not capable. 

Role deployments will take two to three hours. But fresh installation, if we are installing and configuring it, takes one to two hours.

Our team configured it and performed the installation and configuration.

The pricing model differs for India and other countries. Our procurement was based in India for a Microsoft license. The branch in our location is responsible for providing us with the software and licenses. They have an IT team that takes care of all the software-related matters.

Since we started to use it and configured it with our server, we haven't experienced any downtime, instability, or crashes. I have had a good experience with this solution and with Microsoft.

I rate the solution a ten out of ten.

We use Active Directory for domain and infrastructure management. 

One advantage of Active Directory is that you can sync it with Microsoft Office 365, so you can manage on-premise and cloud operations, which can have different requirements. The flexibility of a hybrid management solution is valuable. 

Active Directory's user experience is a little dated. Group policy management should be more customizable.  

I have used Active Directory for a year and a half.

I rate Active Directory nine out of 10 for stability. 

I rate Active Directory eight out of 10 for scalability.

I primarily go to the Microsoft knowledge base for support. It's fairly comprehensive. 

Positive

I rate Active Directory seven out of 10 for affordability. 

I rate Microsoft Active Directory nine out of 10.