Service · System administration

Active Directory setup

A domain solves the problem that becomes painful in a company of twenty people and up: single sign-on, centralised permissions and the ability to disable a departing employee with one action rather than going round twenty systems.

Submit a request What is included

Single sign-on

one password for everything

Policies

settings applied centrally

Offboarding

disabled in a minute

Audit

who did what

What is included

The value of a domain lies not in the directory itself but in the processes around it: onboarding, transfers, offboarding and granting rights.

Discuss the scope

Deployment

Domain controllers with redundancy, name resolution and time synchronisation.

Structure

Organisational units by department rather than every account dumped in one place.

Group policies

Workstation settings applied centrally: lock screen, drives, printers and restrictions.

Access rights

Folder access through groups rather than granted to individuals. Otherwise nobody can make sense of it a year later.

Password policy

Complexity and rotation requirements without the excesses that lead to passwords on sticky notes.

Procedures

Documented onboarding, transfer and offboarding with an action checklist.

How the work runs

A deployment from scratch for a company of up to a hundred workstations takes one to two weeks including joining the machines.

Design

The organisational structure, the group and permission scheme and the machine rollout plan.

Deployment

Controllers, services and baseline policies.

Joining the domain

Workstations department by department, with checks at every stage.

Handover

Documentation, administrator training and the HR procedure guidelines.

Rights granted to individuals are a time bomb. Two years later nobody remembers why a salesperson has access to the accounting folder, and removing it feels risky. Access through groups solves this: you can see who is in a group and what it is for.

Frequently asked questions

From what size of company is a domain needed?

Usually from 15 to 20 workstations. Below that, managing machines by hand is still tolerable. Above it, every change has to be repeated on every machine and inconsistencies appear.

Do we need a second domain controller?

Preferably. If the only controller fails, employees cannot log in and the whole company stops. A second controller costs little, especially in a virtual environment.

What happens when an employee leaves?

By the procedure: the account is disabled rather than deleted, permissions are removed, the mailbox is handed to their manager and the device is collected. Disabling rather than deleting matters, otherwise access is lost to files they owned.

Other services in this area

The whole area

We will set up your domain

Tell us how many workstations you have and whether a domain exists. We will propose a structure and a rollout plan that does not stop your work.

Phone
+7 (495) 978-63-36

Email
office@apply.ru

Office
Moscow, 108 Profsoyuznaya St.

I consent to the processing of personal data