This project is focused on improving the security and functionality of an existing Microsoft Active Directory synchronization program that is part of an enterprise human resources system originally custom built by our sponsor to take advantage of their patented system. To enhance security and support new functionalities, we extended the existing database schema. The existing system only supports the creation of users. In this project, additional features were added to support most changes related to the maintenance of security groups and computers within Active Directory, while making the data available to the rest of the enterprise system. With the new database schema, we integrated a Multi-Factor Authentication (MFA) feature to validate the identity of users with appropriate permissions before they make changes to the system that will ultimately be written in a privileged manner within Active Directory, while rejecting the requests of those whose identities cannot be validated or do not have permissions to make those changes.