I work with an MSP and we would like to implement something to the effect that every user within our organization can easily be added across multiple different domains that aren't nessasarily in the same forest.
Let me give you an example
Say a new user, John Doe joins our company, Obviously we don't want everyone knowing the domain administrator password so we create him a username, say, adminjd, with a company he is to work with, XYZ, however, we manage MANY customers, so not only must he have an account with XYZ, but also ABC, 123, ACME, so on and so forth - so adding him service accounts could consume a technician for several days. No good. The issue is compounded even further if, say we have a not-so-amicable break with Mr. Doe and we want to remove his accounts. We can do this easily and quickly with Solarwinds NCM for Cisco/Juniper/Etc. devices, but we don't have a great solution for Active Directories/LDAP, paid or otherwise.
It would also be nice to monitor events and other relevent Active Directory info, but the primary function is stated above.
Does anyone have any experience with such software? Can someone make a recommendation?