"We are very pleased to see Paramount Defenses, a valued Microsoft partner, offer an innovative security solution (in Gold Finger) that helps enhance security and compliance in Active Directory environments."
– Charles Coats, Senior Product Manager,
Identity and Security Business Group
Organizations worldwide have a mission-critical need to be able to accurately audit effective permissions on Active Directory objects to maintain security and demonstrate regulatory compliance.
Microsoft's Effective Permissions Tab is not 100% accurate. Far more importantly, it it substantially inadequate as it can only determine effective permissions one user at a time.
Specifically, what organizations need is the ability to accurately and easily determine the complete list of all users that have a specific effective permission granted on an Active Directory object.
Our Gold Finger Active Directory Effective Permissions Tool was designed to empower organizations fulfill this exact need.
It uniquely can instantly, accurately and trustworthily audit –
The complete set of effective permissions granted on an Active Directory object.
For each such effective permission, the complete list of all users that have that effective permission.
For each such user, the underlying permissions in the ACL that grants him/her this effective permission
In fact, Gold Finger is the world's only accurate Active Directory Effective Permissions Tool.
Further, only Gold Finger is designed by former Microsoft Program Manager for Active Directory Security, endorsed by Microsoft and trusted by the world's top organizations. It is the world's most capable, valuable and trustworthy Active Directory Audit Tool.
Gold Finger embodies innovative features designed to help organizations accurately determine Active Directory effective permissions –
Accurate Analysis – Accurately determine effective permissions and effective access on any Active Directory object, taking all factors (e.g. precedence orders, memberships expansions, conflict resolution etc.) that influence effective access into account.
Real-Time Analysis – Instantly view and verify the resulting change in effective permissions as soon as a permission changes.
Full Automation – Instantly determine effective permissions and effective access at the touch of a single button.
Full Coverage – Determine effective permissions on any Active Directory object in any Active Directory partition.
Intuitive Interface – Easily view all effective permissions, all users who have them, and their underlying permissions.
Permission-Centric Analysis – Instantly enumerate all users who are granted a specific effective permission / admin task.
Source Identification – Find out exactly which underlying permission is granting a user a specific effective permission.
Effective Access Insight – Find out both, who has what effective permissions and who has what effective access.
Analysis Exports – Export effective permissions for offline analysis, sharing, audit report submission and archival.
DC Specific Analysis and Alternate Credential Use – Target any Domain Controller, and use alternate credentials.
The following are some real-world examples that illustrate the capabilities of our Gold Finger Active Directory Effective Permissions Calculator –
Find out exactly who has what effective permissions (e.g. Write-Property to every property) granted on the Domain Admins group.
Determine exactly who has Write-Property - Member effective permissions on the Domain Admins security group
Find out exactly who has Write Property - userAccountControl effective permissions granted on a critical server's domain computer account.
Determine exactly who has Delete or Delete Tree effective permissions granted on the Corp OU that contains 1000s of objects.
Find out exactly who has Extended Right - Reset Password effective permissions granted on the CEO's domain user account.
Determine exactly who has Extended Right - Send As effective permissions granted on the CFO's domain user account.
Find out exactly who has Modify Permissions effective permissions granted on the domain root object or on AdminSDHolder.
Find out exactly who has Extended Right - Get Replication Changes All effective permissions granted on the domain root object.
Determine exactly who has Extended Right - Apply Group Policy effective permissions granted on the Domain Controllers OU.
Determine exactly how John Doe has Write-Property - Member effective permissions on the Domain Admins security group
Benefits and Solutions
Our Gold Finger Active Directory Effective Permissions Calculator uniquely delivers the following valuable and measurable benefits –
Possess the ability to accurately determine effective permissions and effective access in Active Directory.
Obtain accurate, instant, on-demand, real-time insight into the state of effective permissions/access in Active Directory.
Gain the ability to audit and view the resulting change in effective permissions when you change a permission in Active Directory.
Accurately perform Active Directory effective permissions/access audits to correctly fulfill security and regulatory compliance needs.
Mitigate the Active Directory security risk of domain-wide credential theft posed by the use of the DCSync feature of the Mimikatz tool.
Maintain security and obtain 365-24-7 insight and complete control over the state of effective permissions/access in your Active Directory.
In addition, Gold Finger also helps organizations implement 5 essential cyber security solutions for –
1. Active Directory Security
3. Attack Surface Reduction
5. Audit and Compliance
2. Privileged Access Audit
4. Insider Threat Protection
As such, only Gold Finger's unique capabilities empower organizations worldwide to fulfill all their Active Directory audit (i.e. security, membership, permissions, effective permissions/access and effective privileged access audit) needs.
The tool can be instantly downloaded, installed and run on any Windows computer in under 2 minutes. Its use does not require any admin privileges or any changes to Active Directory. See FAQ.
The tool can be licensed on a long-term (one-year, two-year or three-year license term) basis. Pricing is based on the size of your Active Directory. A license can span multiple domains. For additional information, including a WebEx demo, a complimentary trial, or any questions, please contact our Global Sales Team for assistance. For a quick custom price quote, please click here.
"We use the Gold Finger from Paramount Defenses to fulfill our Active Directory Audit needs. It saves us a lot of time and effort and we would recommend it to anyone who needs to perform Active Directory audits trustworthily and cost-effectively. Great product, great support."