kaseya connect 2011 - directory services

Kaseya Directory Services v1.0Gerald BeaulieuKevin Franck

Agenda

• Open Discussion on AD Usage• Current Challenges• Integration Opportunities• Directory Services Walkthrough• Q&A

Active Directory (AD) Usage

• What percentage of your clients use Active Directory? – ~50%, ~75%, >90%

• Do you currently manage the AD on behalf of your clients?

• Would an integrated view of your clients AD be beneficial?

Active Directory Integration

• Are you leveraging the Kaseya AD Integration today?

• Known Challenges– It is a one-time import– No ongoing sync– Agent on domain controller– Need additional AD Contact Details– Other?

Service Desk Ticketing

• Are you using Service Desk?• Lack of Contact Detail Visibility• Common Requests– Reset AD Password– Enable or Disable AD Account

VSA End User Portal

• Do you provide End User Portal Access for your clients?– As a service?– Ad-hoc requests?

• Known Challenges– Manual Entry of user ID and password– Usability– Other?

How It Works (Example)

How It Works (Example)

How It Works (Example)

How It Works (Example)

How It Works (Example)

No Agent Required on AD Domain Controller

KDS Probe can be deployed to any Domain Computer

Agent-less Domain Controller

Secure connection via LDAP (using specified Domain credentials)

Discover & Continuously Monitor Domains

Discover Domains based on deployed Agents

Install & Activate Probe to continuously monitor Domain

Associate AD Domain with Kaseya Organization

Manage Multiple AD DomainsEach AD Domain is associated with a Kaseya Organization

“Computers”

Dream Customer…

Lots of Computers

No End-Users…

Directory Services• Automated Discovery• Automated Agent Deployment

Ongoing Synchronization of Computers via Policy

Set Computer Sync Policy by OU

Preview entire Domain from Kaseya’s Web Console

Ongoing Synchronization of Computers via Policy

Automatically detect and sync new computers

Automatic configuration of VSA End-User PortalSync selected

computers or all computers

Automatic Agent Deployment

Automatically Deploy Agent:1) Via Network2) VIA GPO

Specify Agent Install Package

Want to Assign Agent settings by Machine Type or Group after Agent Deployment?

Not a problem:

Use the new KaseyaPolicy Management module

(stay tuned…)

Kaseya Group Structure Reflects AD Structure

Kaseya Groups are automatically created based on AD OUs

Kaseya Machines Reflect AD Machines

Kaseya Machines placed in Groups corresponding to the AD OUs

Synchronized Computers

Option to selectively deploy agents:1) Via Network2) Via GPO

AD Details

“Users”

Directory Services• Automated Discovery• Contact Details• Ticket Portal Access

Administrators / Techs – Unified Login to Kaseya Admin Console

Set Policy for Ongoing User Synchronization

Set User Policy by AD Group

Preview all Domain Groups from Kaseya’s Web Console

User Policy Options

User Policy Options:

• Staff Member

• Staff Member and Portal Candidate

• VSA Web Console User (Administrator / Tech)

Set Policy for VSA Admin User

Assign Kaseya Role & ScopeSync Users

based on AD Group membership Preview Users

from Web Admin Console

Allows Unified Login to Kaseya Web Admin Console using Domain Credentials

Create Scope for Admins

Create Scope for Organization

Assign Access to Service Desks

Set Policy for End-Users

Set End-User Policy by AD Group

Set Policy for End-Users

Create Kaseya Staff record with contact details for Service Desk

Automatically configure VSA End-User Portal access (based on Windows Login)

Sync End-Users based on AD Group membership

Preview Users from Web Admin Console

Synchronized Contact Details

Set Policy

Ongoing Sync

Directory

Services

Active Directory - User Kaseya – Staff & User

User Management Console

Domain Admin Group = VSA Admin User

Marketing Group = End-User / Portal User

Configured as VSA User

Configured as End-User Portal Candidate

AD Account Management from Kaseya Admin Console

Enable & Disable Account

Reset Password

Automatic End-User Portal Configuration

Set Policy for Portal Computers (by OU)

Set Policy for Portal Candidate Users (by Group)

End-User Portal Access Automatically Configured

1) End-User Logs On to Windows computer with Kaseya Agent

2) Kaseya Detects Log On

3) Kaseya Automatically Configures Portal Access for End User

End-User Portal – Contact Info

4) User Accesses End User Portal via Tray Icon

5) Contact information automatically derived from Active Directory

End-User Portal – Create Ticket

6) End-User Creates Service Desk Ticket

7) Name, Email, & Phone from AD default during Ticket Entry

Remote Access to End-User Portal

1) End-User logs on to Portal from home computer using their domain credentials

2) Credentials authenticated against managed Domain Controller via KDS Probe

3) End-User has secure access to work computer Desktop, File Transfer, and Ticketing

Unified Log On to Admin Console

Administrator Logs on to Admin Console using Domain credentials

Reference Domain Data from Service Desk

Access to Domain Data from Service Desk Ticket

Lookup Domain Users from Service Desk Ticket

Service Desk Search Leverages Active Directory Data

Search by Name to find User and Org

Browse- Org Details- Machine Groups & Departments- Users / Staff- Tickets

v1.3

Alerts - Stay On Top of Active Directory Activity

Probe Alerts

Alerts for Add / Change / Delete of AD Objects

Thank You

Questions?