Skip to main content

Netwrix Directory Manager v11.1 Documentation

Managing directory objects, such as Active Directory users and groups, is a continuous task. Employees move locations and change departments frequently, so IT professionals must constantly update security and distribution groups, often by hand.

Directory Manager is an identity and access management (IAM) solution that automates these changes and handles the requests and requirements that IT teams see every day.

Functions​

Directory Manager works with a directory service, such as Active Directory and Microsoft Entra ID, to provide the following:

  • Group management
  • User management
  • Password management

Group Management​

Directory Manager offers administration and automation features for directory groups. You can:

  • Define rules to manage group memberships dynamically as changes occur within your organization.

  • Automate the group lifecycle with membership attestation and automatic expiry or deletion.

  • Link identical groups in different directory services, such as Active Directory and Microsoft Entra ID.

  • Create hierarchy-based nested groups that mirror the geographical and managerial structure of your organization.

  • Delegate group management to end users by enabling them to:

    • Create and manage their own groups.
    • Create teams and channels in Microsoft Teams.
    • Join and leave groups.

User Management​

With Directory Manager, you can:

  • Automate user provisioning and deprovisioning in bulk.

  • Establish ownership by defining a clear managerial hierarchy with dotted-line management.

  • Delegate user management to end users by enabling them to:

    • Create and manage users, contacts, and mailboxes in the directory.
    • Manage their direct reports.
    • Update their profiles in the directory.

  • Link identical users in different directory services, such as Active Directory and Microsoft Entra ID.

Password Management​

Directory Manager provides password management functions for administrators, help desk staff, and end users.

  • Administrators can define password checks, such as disallowing passwords that contain certain words or phrases. They can also define regular expressions for allowed passwords and load a list of disallowed passwords from an external file.
  • Users can reset their own passwords and unlock their own accounts after passing multifactor authentication.
  • Help desk staff can reset passwords and unlock accounts for users after authentication.