seth@hendershot:~$

AD automation

REACH

REACH is an Active Directory management system. Requests for directory changes go through defined workflows, and agents carry out the approved work by running PowerShell against AD, so routine identity changes are consistent, approved, and recorded instead of done by hand.

# What it does

  • Takes in AD change requests through defined workflows.
  • Routes requests for approval before anything touches the directory.
  • Hands approved work to agents that run PowerShell against Active Directory.
  • [TBD: list the main workflows, e.g. new user, group changes, disable/offboarding]

# Tech

  • Active Directory
  • PowerShell agents
  • Web app back end
  • [TBD: high-level stack, if you want to share it]

# Security work

  • Changes go through an approval workflow instead of direct admin console edits.
  • [TBD: how agents authenticate to the server]
  • [TBD: least-privilege service accounts / delegated permissions the agents use]
  • [TBD: audit trail: what gets logged and where]

# Screenshots

[TBD: add screenshots to /projects/reach/ (scrub hostnames, IPs and personal data first)]

# Links

← all projects