printer friendly version

Integrating ImproNet access control to Microsoft Active Directory

Powell Tronics has announced its in-house development team has recently completed a fully integrated service with Microsoft’s Active Directory and Impro’s Impronet access control system.

“The PT-AD integration service maintains the tag holder information and active status in the ImproNet system by correlating the user information and status in Active Directory (AD). In addition to the single point of information entry benefit, PT-AD also allows the system administrators to link AD Security Groups to tag holder access groups in the Impronet system, ensuring an automated access group allocation to active tag holders,” advises Melissa Jacobs, product manager at Powell Tronics.

Melissa Jacobs

The request for this integration had come about with numerous requests by IT-driven companies for their AD system to be the master source of employee information, status and security allocation. Up until this time, HR departments would have to notify both the IT department and the security department simultaneously if a new employee was starting or if an employee’s employment had been terminated. In most cases a mismatch between the two systems would occur, resulting in a new employee not having access to the premises for the first few days or tags still being active on the access control system even though the tag holder was no longer an employee of the company – a major security risk.

PT-AD populates the ImproNet tag holder table with Active AD user details. Should a new user be added to the AD system, PT-AD will update the Impronet database with the new details within seconds. If a user’s account is suspended due to their password expiring or malicious activity not in line with company policy, their access tags will be suspended. Disabling a user account in the AD system due to termination of employment, will result in their tag being removed from the access control system and the tag holder being made Non-Current and ready for archive.

In the PT-AD user interface, AD Security Groups are linked to the relevant ImproNet Access Groups. A user’s security group(s) in AD is then automatically translated to an access group(s) in the ImproNet tag holder window from which the access control administrator can allocate a tag.

Share this article:

Further reading: