Handling User Administration

So far this chapter has covered site and group administration, which for the most part require little daily administration. Unfortunately, this is not the case for user administration. With user administration comes several repetitive tasksfor example, changing or adding attribute values such as phone number, resetting passwords for locked-out accounts, managing user profiles, and changing user group membership and user desktop support. These tasks generally are not planned but have to be addressed on a daily basis.

With user administration also comes periodic tasks that must be run to optimize and keep the environment as secure as possiblefor example, running reports for inactive or disabled accounts, updating login scripts, and updating user profiles.