Solution for Domain Consolidation

As organizations grow and change, so must directory services domains in Windows Active Directory, LDAP, NIS, etc. An updated, organized domain structure is easier to manage and uses domain resources more efficiently. Legacy domains provide little organizational value relative to their maintenance and infrastructure requirements, but before an organization can safely decommission or remove a domain, its remaining functions must be identified and absorbed.

Whether you are consolidating or rationalizing multiple domains that have grown organically over time, or adapting to an organizational change due to merger, acquisition, or divestiture, the same questions arise:

• Which user accounts from the old domains are still active, and what are they being used for?
• Which groups from the old domains are still being used?
• Which domain groups are empty or unused?
• To which folders, directories and SharePoint sites do legacy groups provide access?
• How do we make sure that the new, consolidated domain doesn’t expose data?
• How do we efficiently manage and protect data once we’ve consolidated our domains?

The Varonis Data Governance Suite provides a comprehensive, automated solution to answer these questions, providing a framework to identify the legacy users and groups in your directory services that are present in access control lists (ACLs) on file systems, determine whether they are actually being used to access data, identify inactive users, and empty security groups.