kaseya connect 2011 - directory services
TRANSCRIPT
Kaseya Directory Services v1.0Gerald BeaulieuKevin Franck
Agenda
• Open Discussion on AD Usage• Current Challenges• Integration Opportunities• Directory Services Walkthrough• Q&A
Active Directory (AD) Usage
• What percentage of your clients use Active Directory? – ~50%, ~75%, >90%
• Do you currently manage the AD on behalf of your clients?
• Would an integrated view of your clients AD be beneficial?
Active Directory Integration
• Are you leveraging the Kaseya AD Integration today?
• Known Challenges– It is a one-time import– No ongoing sync– Agent on domain controller– Need additional AD Contact Details– Other?
Service Desk Ticketing
• Are you using Service Desk?• Lack of Contact Detail Visibility• Common Requests– Reset AD Password– Enable or Disable AD Account
VSA End User Portal
• Do you provide End User Portal Access for your clients?– As a service?– Ad-hoc requests?
• Known Challenges– Manual Entry of user ID and password– Usability– Other?
How It Works (Example)
How It Works (Example)
How It Works (Example)
How It Works (Example)
How It Works (Example)
No Agent Required on AD Domain Controller
KDS Probe can be deployed to any Domain Computer
Agent-less Domain Controller
Secure connection via LDAP (using specified Domain credentials)
Discover & Continuously Monitor Domains
Discover Domains based on deployed Agents
Install & Activate Probe to continuously monitor Domain
Associate AD Domain with Kaseya Organization
Manage Multiple AD DomainsEach AD Domain is associated with a Kaseya Organization
“Computers”
Dream Customer…
Lots of Computers
No End-Users…
Directory Services• Automated Discovery• Automated Agent Deployment
Ongoing Synchronization of Computers via Policy
Set Computer Sync Policy by OU
Preview entire Domain from Kaseya’s Web Console
Ongoing Synchronization of Computers via Policy
Automatically detect and sync new computers
Automatic configuration of VSA End-User PortalSync selected
computers or all computers
Automatic Agent Deployment
Automatically Deploy Agent:1) Via Network2) VIA GPO
Specify Agent Install Package
Want to Assign Agent settings by Machine Type or Group after Agent Deployment?
Not a problem:
Use the new KaseyaPolicy Management module
(stay tuned…)
Kaseya Group Structure Reflects AD Structure
Kaseya Groups are automatically created based on AD OUs
Kaseya Machines Reflect AD Machines
Kaseya Machines placed in Groups corresponding to the AD OUs
Synchronized Computers
Option to selectively deploy agents:1) Via Network2) Via GPO
AD Details
“Users”
Directory Services• Automated Discovery• Contact Details• Ticket Portal Access
Administrators / Techs – Unified Login to Kaseya Admin Console
Set Policy for Ongoing User Synchronization
Set User Policy by AD Group
Preview all Domain Groups from Kaseya’s Web Console
User Policy Options
User Policy Options:
• Staff Member
• Staff Member and Portal Candidate
• VSA Web Console User (Administrator / Tech)
Set Policy for VSA Admin User
Assign Kaseya Role & ScopeSync Users
based on AD Group membership Preview Users
from Web Admin Console
Allows Unified Login to Kaseya Web Admin Console using Domain Credentials
Create Scope for Admins
Create Scope for Organization
Assign Access to Service Desks
Set Policy for End-Users
Set End-User Policy by AD Group
Set Policy for End-Users
Create Kaseya Staff record with contact details for Service Desk
Automatically configure VSA End-User Portal access (based on Windows Login)
Sync End-Users based on AD Group membership
Preview Users from Web Admin Console
Synchronized Contact Details
Set Policy
Ongoing Sync
Directory
Services
Active Directory - User Kaseya – Staff & User
User Management Console
Domain Admin Group = VSA Admin User
Marketing Group = End-User / Portal User
Configured as VSA User
Configured as End-User Portal Candidate
AD Account Management from Kaseya Admin Console
Enable & Disable Account
Reset Password
Automatic End-User Portal Configuration
Set Policy for Portal Computers (by OU)
Set Policy for Portal Candidate Users (by Group)
End-User Portal Access Automatically Configured
1) End-User Logs On to Windows computer with Kaseya Agent
2) Kaseya Detects Log On
3) Kaseya Automatically Configures Portal Access for End User
End-User Portal – Contact Info
4) User Accesses End User Portal via Tray Icon
5) Contact information automatically derived from Active Directory
End-User Portal – Create Ticket
6) End-User Creates Service Desk Ticket
7) Name, Email, & Phone from AD default during Ticket Entry
Remote Access to End-User Portal
1) End-User logs on to Portal from home computer using their domain credentials
2) Credentials authenticated against managed Domain Controller via KDS Probe
3) End-User has secure access to work computer Desktop, File Transfer, and Ticketing
Unified Log On to Admin Console
Administrator Logs on to Admin Console using Domain credentials
Reference Domain Data from Service Desk
Access to Domain Data from Service Desk Ticket
Lookup Domain Users from Service Desk Ticket
Service Desk Search Leverages Active Directory Data
Search by Name to find User and Org
Browse- Org Details- Machine Groups & Departments- Users / Staff- Tickets
v1.3
Alerts - Stay On Top of Active Directory Activity
Probe Alerts
Alerts for Add / Change / Delete of AD Objects
Thank You
Questions?