How can I explain to my manager the benefits of an Active Directory connection?

Question

Active Directory

Hello.
I want to connect in the Active Directory organization, for fine tuning of the rights of users.
And, of course, because sometimes I'm too lazy to set up each computer :)))
There are few computers, from two offices, even 20 and not typed.
But I want to introduce a domain controller, since very very fine settings for user access to certain resources, actions, etc. are needed (so fine that even two people at neighboring tables, in the same office, should not be able to perform some of the same actions).
Naturally, you need to beg for a separate server. But arguments like perspective, control, and ease of administration won't work. How would you explain this to the leader, who, of course, "doesn't fumble"?
PS Or maybe there is no point in connecting at all?

Answer 1

Your question already has an answer.

since very very fine settings for user access to certain resources, actions, etc. are needed (so fine that even two people at neighboring tables, in the same office, should not be able to perform some of the same actions).

Who requires these settings from you, your boss or someone else? If the boss, then here is the answer for you, if someone else, then take it and contact the boss, that this person explained all these fine adjustments to the boss.

Answer 2

From a managerial point of view - in the situation described, AD has the same need as turn signals for a hare.
At a certain moment, when there are so many computers that a herd of sysadmin runners is needed to administer them without ad, there is reason to think about the ratio of the cost of implementing ad instead of the salary of a herd of runners ...
Something like this.
And yes, DC must be at least two. On different hardware hosts. Otherwise, the verdict is "you don't need AD".
p / s / I will not holivar and about "even Microsoft sold ..." in the know

Answer 3

The leader thinks by solving the problems assigned to him. Quite clearly, in order to be "simple and easy" is not an argument at all. If you can convince the manager that this will help solve his problems, then the issue can be resolved, if not, then obviously the resources will be allocated to those tasks that are relevant at the moment. Try to look at this issue from the point of view of the leader and determine the advantages from his position, and not yours.

Answer 4

No separate server needed.
It is necessary 2 separate servers under the Active Directory - the main and reserve. Be sure to have a backup.
You can start not on 2 iron servers, but in a virtual machine.

Answer 5

I got the impression that the author does not understand the purpose of AD and poorly represents his goals. I recommend starting with setting tasks for yourself, for example: provide the ability to centrally store and manage user accounts, organize automatic configuration of the working environment (connecting printers, using proxies, security policy, connecting network drives, etc.). In addition, as already mentioned, it is highly recommended to have a second host with the BDC role, to ensure fault tolerance.
In addition, keep in mind that client workstations must be able to subsequently enter into the domain, if the operating system does not correspond to the edition for subsequent entry into the domain, then add an additional expense item.
For a manager, it will be enough to describe the benefits of implementing AD, of course, from the point of view of a business, and not an IT person. Tell about the existing risks, as well as how this technology will help to minimize them.