How Surrey Police Force Securely Administers an Active Directory

Like many other enterprises, when Surrey Police moved from an infrastructure based on the NT4 model into Active Directory they also carried over domain admins group membership and its associated risks. The result was that, in error, IT staff could delete or modify objects in Active Directory, stopping users from logging on and using their computer systems.

Surrey Police needed a solution that enabled specifying what each member of IT could and, more importantly, couldn’t do in terms of Active Directory management. The solution needed to

• Monitor and log Active Directory changes and security events
• Manage Group Policies to ensure a secure and managed environment for all users

After reviewing several solutions, Surrey Police "quickly ascertained that [ScriptLogic's] Active Administrator provided the most comprehensive functionality and the best total cost of ownership."

Read this case study to learn how Surrey Police benefited from their decision.