TL;DR
Cayosoft Administrator marks 13 years of simplifying hybrid identity with governed workflows, least-privilege access, and controls built for the AI era.
When Cayosoft Administrator was introduced more than a decade ago, Active Directory administration was already complicated. Identity operations now span Active Directory, Entra ID, Microsoft 365, Exchange, Teams, Intune, HR systems, service-management platforms, and connected applications.
This complexity not only makes administration and user provisioning more complex, but it also gives attackers more identities, permissions, workflows, and administrative paths to target. Today, the stakes are higher: AI-assisted attacks can accelerate reconnaissance, credential abuse, privilege escalation, and lateral movement across complex hybrid identity systems.
That is the context in which Cayosoft Administrator 13.3 arrived on October 13, 2026, a fitting date for the product’s thirteenth year. The release continues the product’s core idea: routine identity work should be standardized, controlled, and understandable to streamline complex processes, reduce the attack surface, and strengthen the identity posture.
13 Years of Stronger Identity Posture Management
Cayosoft founders Bob Bobel and Andrei Polevoi believed there was a better way to manage identity. As veterans who helped establish the Active Directory management category after AD launched in 1999, they brought that experience to Cayosoft and built Administrator around a simple principle: identity administration should strengthen control without adding complexity.
Thirteen years later, that belief is reflected in the ways Cayosoft Administrator helps organizations improve identity posture across hybrid environments:
- Govern hybrid identity- Manage Active Directory, Entra ID, Microsoft 365, Exchange, Teams, Intune, and connected systems through consistent processes.
- Delegate without broad access- Give help desk, HR, and regional teams task-based authority within defined objects, boundaries, and approvals.
- Standardize user and group management- Apply consistent workflows for provisioning, role changes, group assignments, suspension, and deprovisioning across hybrid environments.
- Optimize Microsoft 365 licenses- Tie license assignment and reclamation to consistent joiner, mover, and leaver workflows to reduce waste and improve control.
- Replace fragile automation- Use more than 250 adaptable workflows instead of scripts, manual handoffs, and one-off processes.
- Improve control and evidence- Reduce manual exceptions, narrow administrative exposure, and preserve searchable change history for security and compliance.
- Enable self-service- Empower users to complete routine identity tasks on their own.
Identity Control Matters More When Attacks Move Faster
Streamlined identity administration is critical for strong posture management against attacks. AI-assisted attacks exploit identity administration weaknesses at machine speed, machine reasoning, and with machine persistence. They can help adversaries identify exposed accounts, automate credential attacks, generate convincing social engineering, and move quickly through excessive permissions or stale access.
Group managed service accounts (gMSA) illustrate the risk. If a gMSA or an account authorized to retrieve its password is compromised, an attacker may gain durable access to the services and systems that depend on it. Administrator 13.3 helps remediate gMSA exposure by giving authorized teams direct Web Portal control over gMSA membership, password-retrieval permissions, and Kerberos delegation, making risky access easier to identify and remove without relying on disconnected tools.
Self-service account recovery is another example. Administrator 13.3 can verify users with an emailed code or an authenticator app, helping organizations retire security questions, one of the weakest recovery factors and a favorite target for AI-generated social engineering against helpdesks. Group certification rules can also cover multiple OUs, domains, and forests in one rule, with review periods set in months, making regular attestation practical at scale and helping remove stale access before it is abused.
Administrator 13.3 also supports stronger connection security. The Active Directory extension can use LDAPS for direct LDAP connections, while remote console and replication connections can authenticate with Kerberos where NTLM is restricted, aligning with Microsoft’s plan to disable NTLM by default in future Windows releases.
The Next Era of Identity Demands Strong Controls
A product’s age is not evidence of value on its own. Longevity matters when it produces a deeper understanding of how organizations operate and where attackers benefit from weak handoffs, accumulated exceptions, excessive access, and processes that depend on a few senior staff.
Administrator 13.3 adds practical capabilities, including self-service account recovery that reduces routine helpdesk requests by enabling users to regain access on their own. But the larger story is continuity. It keeps moving identity work away from disconnected consoles, fragile scripts, and broad permissions, and toward standardized processes, narrower authority, and clearer evidence.
That direction matters more as AI helps attackers operate with greater speed and scale across human and non-human identities. The administrative layer must keep identity changes controlled, repeatable, and visible before an incident creates pressure. Thirteen years after the introduction of Administrator, the 13.3 release shows why disciplined identity control is becoming more—not less—important.
FAQs
Cayosoft Administrator is a hybrid identity administration platform for managing Active Directory, Microsoft Entra ID, Microsoft 365, Exchange, Teams, Intune, and connected systems. It standardizes lifecycle processes, delegates routine work safely, and provides searchable change history across hybrid environments.
Cayosoft Administrator reduces identity risk by replacing inconsistent scripts and manual processes with governed workflows. It also supports least-privilege delegation, consistent provisioning and deprovisioning, controlled group and license management, and complete visibility into administrative changes.
Administrator 13.3 provides direct Web Portal management of group managed service accounts. Authorized teams can control gMSA membership, password-retrieval permissions, and Kerberos delegation, making risky access easier to identify and remove.
AI can help attackers discover exposed accounts, automate credential attacks, and exploit excessive permissions faster. Consistent lifecycle management, narrow administrative access, and clear change evidence reduce the identity gaps attackers can use to move across hybrid environments.