Enterprise Support Services

Active Directory Support for Windows Server 2003
Windows Active Directory requires experience to configure efficiently across an enterprise. Progent’s Microsoft certified consultants are experts in designing, deploying and troubleshooting complex Microsoft Active Directory (Microsoft AD) installations. Areas of expertise include:

• Progent's Microsoft-certified consultants have extensive experience troubleshooting complex Active Directory issues such as replication problems, multi-domain partition configurations, corrupted AD objects, clean-up of legacy beta software configuration objects in production AD environment, and repair of failed installations of AD and AD-integrated applications. Progent is also skilled in using “expert only” AD tools such as ADSIEDIT, NTDSUTIL, DCDIAG and NETDIAG.
• Progent offers expertise in designing an enterprise Active Directory environment with multiple locations and can deliver fast, efficient solutions for fault tolerant architecture, placement of servers and services, and AD server roles.
• Progent can design and implement an optimal DNS configuration that correctly handles internal, external and remote users.
• To save clients the cost of expensive reconfigurations that may be required as a result of poor initial decisions, Progent can help make key early decisions concerning Active Directory naming standards, hierarchical model, IT management structure, utilization and structure of group policy objects, plus security and auditing definitions. Progent can also anticipate the impacts of server and service configurations on functionality and performance.
• Progent can provide assistance in developing and deploying group policy security models that can save significant support resources by effectively controlling the ability of users to make configuration changes.
• To maximize system robustness and availability, Progent's engineers can help create an Active Directory architecture and provide expert implementation that features enterprise class redundancy, fault tolerance, effective data protection systems, and seamless disaster recovery.
• Progent's consultants have experience with a broad variety of scenarios involving Active Directory migrations from legacy NT domain environments, including upgrading of existing NT domains, “fresh” AD domain migrations, collapsing of multiple domains into a single domain, and creation of sub-domain or multi-domain environments.
• To create a unified directory structure, Progent can help migrate/merge an Exchange 5.5 directory/system into an existing Windows 2000/2003 Active Directory system.
• In order to avoid disruptions in productivity, Progent can perform seamless multi-site/multi-server Active Directory migrations that are transparent to users.
• Progent can diagnose and resolve complex problems concerning workstation and server authentication in an Active Directory environment.
• The specialists in Progent's Experts Team can implement and support applications integrated with Active Directory such as Microsoft CRM, Microsoft ISA Server, Microsoft SMS 2003, Microsoft Exchange Server 2007, Exchange Server 2003, and Cisco Unity unified messaging.
• Progent can help architect, plan and mange the migration/merging of an acquired entities Active Directory environment into a single AD structure.
• Progent has world-class expertise implementing and configuring Microsoft Operations Manager to monitor the health and operations of a complex Active Directory environment.
• For enhanced security, Progent can provide assistance designing enterprise-wide security policies and procedures and work with Active Directory configuration to implement such policies.

Active Directory Domain Services
These services are an enhanced and renamed version of Active Directory Directory Services. Active Directory Domain Services centralize configuration data, authentication requests, and information about all stored objects. This allows convenient, centralized management of directory-enabled objects. Windows Server 2008 enhancements to Active Directory Domain Services include:

• Auditing improvements
• Fine-grained passwords for more versatile password policies
• A Read-only Domain Controller for environments with marginal security
• Restartable Active Directory Domain Services makes maintenance less disruptive

• Install from Media Generation facilitates the creation of installment disks
• Auditing of changes within the directory service
• Database Mounting Tool lets you view snapshots of database information
• Active Directory Sites and Services Support simplifies management of AD LDS replication
• Dynamic List of LDIF files simplifies setting up an AD LDS server
• Recursive Linked-Attribute Queries can follow nested attribute links do find additional properties

• Enrollment Agent Templates can delegate enrollment agents on a per-temple basis
• Integrated Simple Certificate Enrollment Protocol (SCEP) allows certificates to be issued to network appliances such as routers
• An Online Responder reduces network traffic when clients validate certificates
• Enterprise PKI (PKI View) is a new management tool that facilitates the management of Certification Authority (CA) hierarchies

• Availability As an Integrated Server Role allows Active Directory Federation Services to be managed via Server Manager
• Integration with Microsoft Office SharePoint Server 2007 supports a single sign-in
• Integration with Active Directory Rights Management Services (AD RMS) eliminates the need for AD RMS to be installed in both organizations
• Improved Administration makes it easier for both organizations to configure trust information

• Application Support allows you to install the Active Directory Rights Management Services client on other Windows operating systems.
• Persistent Protection keeps your content secure even when it is outside your network environment
• Usage Policy Templates makes it easy to set usage rights for files with the same rights