Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We have several passwords and key phrases that we need to store in a central place. However, we need to protect this information so others cannot access it.

Our thoughts are to have a password manager that integrates with active directory. By integrating with Active Directory, I mean control who can access saved passwords by seeing if they are a member of a certain group.

Anybody know of any password managers that meet this criteria, or have a better solution?

share|improve this question

4 Answers 4

up vote 3 down vote accepted

I've used password manager pro with pretty good success. It integrates with both LDAP and AD.

share|improve this answer
1  
Password Manager Pro can also reset service accounts to sync with the AD. So no more Password Never Expires on those service accounts. –  David Yu Sep 17 '10 at 20:06
    
it can reset all builtin accounts as well so you can have local admin be a complex password that you are forced to look up. The auditing feature can then tell you who had to look up local admin –  Jim B Sep 17 '10 at 20:41

A lot of people (my team included) use KeePass. It's not AD-integrated, but you can restrict the folder it's in to just the people who should see it, and only share the password with them.

share|improve this answer

password safe is the tool of choice here.

No AD integration but folder security should help with that.

We also run nightly backups of the safe folder and keep them . . . forever.

share|improve this answer

PasswordState could also be an option. It supports Active Directory integration.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.