Paramount Defenses Company | Leadership | Products | Solutions | Partners | Privileged Access Insight | Support | News | Careers | Blog | Contact 100%
Our Global Customers - Cyber Security Thought Leaders
Gold Finger  
for Active Directory  
Gold Finger
Mini
| Security
Audit Tool
| Membership
Reporting Tool
| Token-Size
Calculator
| ACL Viewer
& Exporter
| Permissions
Analyzer
| Effective Permissions 
& Access Calculator
| Administrative Access 
& Delegation Audit Tool
| Gold Finger
007G
| Golden
Eye

Active Directory Group Membership Reporting Tool

A simple Active Directory Group Membership Audit/Reporting Tool

Our Active Directory Group Membership Reporting Tool empowers organizations to
easily enumerate and audit the memberships of their Active Directory security groups.


Active Directory Group Membership Reporting Tool

Gold Finger Active Directory Group Membership Reporting Tool

Sample Output Sample Output



Active Directory User Membership Reporting Tool

Gold Finger Active Directory User Membership Reporting Tool

Sample Output Sample Output


"We are very pleased to see Paramount Defenses, a valued Microsoft partner, offer an innovative security solution (in Gold Finger) that helps enhance security and compliance in Active Directory environments."

– Charles Coats, Senior Product Manager,
Identity and Security Business Group



Overview

Organizations worldwide have a need to be able to easily and reliably enumerate and audit the complete membership, including any nested groupings, of their Active Directory security groups.

Active Directory Group Membership Audit

Our Gold Finger Active Directory Group Membership Reporting Tool was designed to empower organizations fulfill this exact need.

It can instantly, accurately and trustworthily audit

  • The complete membership of any Active Directory security group
  • The complete list of all Active Directory security groups to which a user belongs
  • The complete list of all security groups nested within an Active Directory security group
  • The identities of all security groups via which a user is a member of an Active Directory security group
  • The identities of all security groups via which a group is a member of an Active Directory security group

In fact, only Gold Finger is designed by former Microsoft Program Manager for Active Directory Security, endorsed by Microsoft
and trusted by the world's top organizations. It is the world's most capable, valuable and trustworthy Active Directory Audit Tool.

Technical Features

Gold Finger embodies innovative features designed to help organizations easily perform Active Directory Group Membership Audits –

  1. Group Membership Enumeration – Enumerate the complete, flattened membership of any Active Directory security group.
  2. User Membership Enumeration – Enumerate the complete list of all Active Directory security groups to which a user belongs.
  3. Circular Loop Detection and Infinite Loop Avoidance – Detect circularly-nested groups and avoid expansion infinite loops.
  4. Direct and Nested Enumeration – Enumerate direct members as well as nested members of any Active Directory security group.
  5. Source Nested Group Identification – Identify all nested groups via (membership in) which a user/group is a member of a group.
  6. Dynamic Well-Known Security Principal Inclusion – Dynamically evaluate the membership of any well-known security principal.
  7. Security-Principal Type Filter – Filter results of a group expansion by security-principal type to view members of a specific type.
  8. Professional Grade PDF Reports – Generate fully customizable group- and user- based membership audit reports in PDF format.
  9. Membership Exports – Export group memberships for offline analysis, sharing, regulatory compliance reporting and archival.
  10. DC Specific Analysis and Alternate Credential Use – Target any specific Domain Controller as well as use alternate credentials.
Real-World Examples

The following are some real-world examples that illustrate the capabilities of our Gold Finger Active Directory Group Membership Reporting Tool –

  1. Enumerate the direct membership of the Domain Admins security group
  2. Enumerate the complete (direct and indirect) membership of the Domain Admins security group
  3. Identify all security groups nested within the All Employees domain security group
  4. Identify all security groups to which the CEO's domain user's account belongs
  5. Identify all security groups to which a Domain Admin's account belongs
  6. Find out how user John Doe is a member of the System Admins domain security group
  7. Find out how the security group Temp Contractors is somehow a member of the All Employees security group
  8. Generate PDF reports documenting the complete membership of all privileged access groups in Active Directory
  9. Generate a PDF report that documents all the groups to which the Chief Financial Officer's (CFO's) domain user account belongs
  10. Export the direct or complete (nested) membership of any domain security group, or that of all members to which any account belongs.
Benefits and Solutions

Our Gold Finger Active Directory Group Membership Reporting Tool delivers the following valuable and measurable benefits –

  1. Instantly enumerate, export, audit and document the membership of any Active Directory security group.
  2. Instantly determine, export, audit and document the list of all Active Directory security groups to which a user belongs.
  3. Easily audit the complete group membership of all administrative and privileged access security groups in Active Directory.
  4. Easily identify group nestings as well as how a specific user/group is a member of a specific Active Directory security group.
  5. Easily generate professional-grade PDF reports that document the membership of any Active Directory security group or user.
  6. Obtain 365-24-7 insight into the membership of all Active Directory security groups that control access to all IT resources in the network.

In addition, Gold Finger also helps organizations implement 5 essential cyber security solutions for –

1. Active Directory Security 3. Attack Surface Reduction 5. Audit and Compliance
2. Privileged Access Audit 4. Insider Threat Protection

As such, only Gold Finger's unique capabilities empower organizations worldwide to fulfill all their Active Directory audit
(i.e. security, membership, permissions, effective permissions/access and effective privileged access audit) needs.

Gold Finger is the Gold Standard for Active Directory Audit Tools in capability, value and trustworthiness.

Requirements, Licensing and Pricing

The tool can be instantly downloaded, installed and run on any Windows computer in under 2 minutes. Its use does not require any admin privileges or any changes to Active Directory. See FAQ.

The tool can be licensed on a short-term (weekly, monthly, quarterly) as well as a long-term (annual) basis. Short-term licenses are ideal for independent consultants and small projects and long-term licenses are ideal for long-term organizational use. A 1-week, 1-user license for use in 1 domain starts at just US $99 and can be instantly purchased by clicking the Buy Now button below.

"We use the Gold Finger from Paramount Defenses to fulfill our Active Directory Audit needs. It saves us a lot of time and effort and we would recommend it to anyone who needs to perform Active Directory audits trustworthily and cost-effectively. Great product, great support."

– Sean Seeliger, Architect






Active Directory Security Audit Tool Active Directory Security Audit Tool
Kerberos Token-Size Calculator Kerberos Token-Size Calculator


Welcome
Who We Are What We Do How We Protect You
Sitemap