reference project Consolidation of grown directory and authorization structures

Project: In this 9-month IT project we carried out comprehensive data consolidation and authorization management for 600 accounts. This included consolidating grown directory structures and 18 TB of data. Through the use of migRaven.24/7 Analyzer and migRaven.one We cleaned up 85% of old data that was older than two years and removed 60% of all explicit permissions.

With a newly built directory structure according to best practice and improved authorization management, we have created a solid basis for efficient and secure data management.

Project:

• 600 accounts
• Consolidate directory structures that have grown over 30 years
• Permissions consolidate
• Introduction of authorization management via data owners

Challenge:

• 18 TB of data in an evolved structure
• 85% of all data is older than 2 years
• Deep authorization situation in the directory tree (> 4 levels)
• No standardized authorization concept (user directly authorized, orphaned SIDs)
• There are no owners for directories
• Classification of GDPR relevant data not available
• No DFS-N

Solution:

• Structures analyzed in detail with migRaven -> obsolete data eliminated first
• Obsolete permissions automatically identified and removed: 60% of all expl. Permissions
• New directory structure built according to best practice via DFS
• Owner for directories with migRaven.one Scoring determined
• Active Directory cleaned of obsolete groups (redundant, deep, empty group nests identified and cleaned via migRaven graph analysis)
• Owners have all relevant directories themselves migRaven.one migrated
• Permanent management of permissions via migRaven.24/7 Access Manager
• Exit strategy: Permanent archiving (separation) of obsolete data established

Project duration: 9 months