One of the World's Top Cyber Security Companies
Company | Leadership | Products | Services | Partners | Cyber Security Insight | Support | News | Careers | Blog | Contact
Our Global Customers - Cyber Security Thought Leaders
Gold Finger  
for Active Directory  
Gold Finger
Mini
| Security
Audit Tool
| Membership
Reporting Tool
| Token-Size
Calculator
| ACL Viewer
& Exporter
| Permissions
Analyzer
| Effective Permissions 
& Access Calculator
| Administrative Access 
& Delegation Audit Tool
| Gold Finger
007G
| Golden
Eye

Active Directory Effective Permissions and Effective Access Calculator






The Active Directory Effective Permissions Calculator was designed to empower organizations to accurately calculate
and audit effective permissions and effective access on Active Directory objects easily, efficiently and cost-effectively.


Active Directory Effective Permissions Tool

Active Directory Effective Permissions Calculator


Active Directory Effective Access Tool

Active Directory Effective Access Calculator




Overview

Organizations have a mission-critical need to be able to accurately determine effective permissions and effective access on Active Directory objects, to know exactly who is provisioned what administrative access on vital IT resources stored in Active Directory, such as executive & administrative domain user accounts, critical server accounts, virtually all domain security groups & OUs.


Active Directory Effective Permissions/Access


The Active Directory Effective Permissions Tool was specially designed to help organizations calculate & audit effective permissions & effective access in Active Directory accurately & efficiently.

It fully automates the process of accurately determining effective security permissions and effective access on Active Directory objects, thus helping organizations gain mission-critical insight.




Capabilities

The Active Directory Effective Permissions Tool was specifically designed to help IT personnel easily, efficiently and above all accurately determine, analyze, verify, audit and document exactly

  • Who has what effective permissions allowed on a specific Active Directory object.
  • Who has a specific permission effectively allowed on a specific Active Directory object.
  • How a specific individual has a specific permission effectively allowed on a specific Active Directory object.
  • Who is effectively provisioned/delegated which administrative tasks on an individual Active Directory object
  • Who is effectively delegated a specific administrative task on a specific Active Directory object.
  • How a specific individual is able to perform a specific administrative task on a specific Active Directory object.



Examples

The following examples illustrate some real-world usage scenarios –

  • Find out exactly who has what effective permissions (e.g. Write-Property to all properties, Extended right to all applicable extended rights etc.) granted on the Domain Admins group.
  • Identify exactly who has Write-Property Member permission effectively allowed on the Domain Admin's group.
  • Find out exactly how John is able to modify the membership of the Domain Admin's group.
  • Audit exactly who can perform which administrative tasks on the CEO's account (e.g. Who can reset the CEO's password, disable the CEO's account, send email as the CEO, etc.)
  • Identify exactly who can reset the CEO's account
  • Determine exactly how John is able to reset the CEO's account's password.



Features

The Active Directory Effective Permissions Tool offers the following features –

  1. Accurate Analysis – Accurately determine effective permissions and effective access on Active Directory objects, taking all factors that influence effective access analysis into account.
  2. Real-Time Analysis – Instantly view and verify the resulting change in effective permissions and effective access as soon as you change any permission on an Active Directory object.
  3. Full Automation – Instantly determine effective permissions and effective access at a button's touch, leveraging the tool's fully automated analysis process.
  4. Full Coverage – Determine effective permissions on any Active Directory object in all partitions, including the Configuration and Schema partitions.
  5. Intuitive Interface – Easily view the list of all effective permissions provisioned on an Active Directory object, & for each effective permission, see who is effectively granted that permission.
  6. Permission-Centric Analysis – Instantly view the list of all individuals who are granted a specific effective permission / administrative task.
  7. Source Identification – Find out exactly which underlying permission is granting a specific individual, a specific effective permission on the Active Directory object.
  8. Effective Access Insight – Find out not only who has what effective permissions granted but also who is delegated what administrative tasks by virtue of these effective permissions.
  9. Analysis Exports – Export analysis results for offline analysis, sharing, audit report submission and archival.
  10. DC Specific Analysis and Alternate Credential Use – Target any specific Domain Controller of your choice, and use alternate credentials when performing permissions analysis.



Benefits

The Active Directory Effective Permissions Tool delivers the following benefits –

  • Obtain accurate, instant, on-demand, real-time insight into the state of effective permissions and effective access provisioned on Active Directory objects.
  • Identify, verify and audit exactly who has what effective permissions and effective administrative on Active Directory objects, and how so.
  • Enhance and maintain security by having 365-24-7 insight into the true state of effective permissions and effective access in Active Directory.
  • Easily perform fully customizable Active Directory effective permissions and effective access audits to fulfill security and regulatory compliance needs.
  • Precisely analyze and consequently obtain complete control over the state of effective administrative access grants provisioned on Active Directory objects.



Requirements

The tool can be downloaded, installed and run on any domain-joined machine in under 2 minutes. Its use does not require any admin privileges or any changes to Active Directory. See FAQ.







Licensing and Pricing

The tool can be licensed on a long-term (one-year, two-year or three-year license term) basis. Picing is based on the size of your Active Directory. A license can span multiple domains. For additional information, including a WebEx demo, a complimentary trial, or any questions, please contact our Global Sales Team for assistance. For a custom price quote, please click please here.







"We are very pleased to see Paramount Defenses, a valued Microsoft partner, offer an innovative security solution (in Gold Finger) that helps enhance security and compliance in Active Directory environments."

– Charles Coats, Senior Product Manager,
Identity and Security Business Group

"We use the Gold Finger from Paramount Defenses to fulfill our Active Directory Audit needs. It saves us a lot of time and effort and we would recommend it to anyone who needs to perform Active Directory audits trustworthily and cost-effectively. Great product, great support."

– Sean Seeliger, Architect








Permissions Analyzer Permissions Analyzer
Administrative Access & Delegation Audit Tool Administrative Access & Delegation Audit Tool


Welcome
Who We Are What We Do How We Protect You
Sitemap