Company  |  Vision  |  Leadership  |  Products  |  Services | Support  |  News | Careers | Contact


2007

2008


2009
Overview | Reports | Accuracy | Audience | Features | Benefits | Editions | Download | Try | Buy | Service | FAQ

     Gold Finger can generate 365 reports, including 25 access reports that are absolutely
     essential for maintaining security, performing audits and demonstrating compliance.
Security Reports Access Reports All Reports Sample Reports Request a Report

Gold Finger lets organizations instantly generate 338 security and 25 access reports that are essential to maintaining security, fulfilling audit requirements and demonstrating compliance of Active Directory resource security & access rights –

ACCOUNT MANAGEMENT REPORTS
ReportTypeEditions
List of all domain user accountsSecurityAll
List of all enabled domain user accountsSecurityAll
List of all disabled domain user accountsSecurityAll
List of all locked domain user accountsSecurityAll
List of all unlocked domain user accountsSecurityAll
List of all privileged domain user accountsSecurityAll
List of all domain user accounts created in the last few daysSecurityAll
List of all domain user accounts changed in the last few daysSecurityAll
List of all domain user accounts deleted in the last few daysSecurityAll
List of all domain user accounts that have an expiration dateSecurityAll
List of all domain user accounts that do not have an expiration dateSecurityAll
List of all domain user accounts that expired in the last few daysSecurityAll
List of all domain user accounts that will expire in the next few daysSecurityAll
List of all domain user accounts that do not require passwords to logonSecurityAll
List of all domain user accounts that require passwords to logonSecurityAll
List of all domain user accounts whose passwords never expireSecurityAll
List of all domain user accounts whose passwords do expireSecurityAll
List of all domain user accounts whose password is stored using reversible encryptionSecurityAll
List of all domain user accounts for which DES encryption types are usedSecurityAll
List of all domain user accounts that require Smart cards for loginSecurityAll
List of all domain user accounts that do not require Smart cards for loginSecurityAll
List of all domain user accounts that are sensitive and cannot be delegatedSecurityAll
List of all domain user accounts that are not sensitive and can be delegatedSecurityAll
List of all domain user accounts that require Kerberos preauthenticationSecurityAll
List of all domain user accounts that do not require Kerberos preauthenticationSecurityAll
List of all domain user accounts whose password must be changed at next logonSecurityAll
List of all domain user accounts whose password was changed in the last few daysSecurityAll
List of all domain user accounts whose password has not changed in the last few daysSecurityAll
List of all domain user accounts for which Kerberos name mappings are specifiedSecurityAll
List of all domain user accounts for which Kerberos name mappings are not specifiedSecurityAll
List of all user accounts for which a user logon name is specifiedSecurityAll
List of all user accounts for which a user logon name is not specifiedSecurityAll
List of all domain user accounts that can logon to any workstationSecurityAll
List of all domain user accounts that can only logon to specific workstationsSecurityAll
List of all domain user accounts for which specific logon hours have not been specifiedSecurityAll
List of all domain user accounts for which specific logon hours have been specifiedSecurityAll
List of all domain user accounts who can logon anytimeSecurityAll
List of all domain user accounts for which a logon script is specifiedSecurityAll
List of all domain user accounts for which a logon script is not specifiedSecurityAll
List of all domain user accounts for which a home folder is specifiedSecurityAll
List of all domain user accounts for which a home folder is not specifiedSecurityAll
List of all domain user accounts for which a user profile is specifiedSecurityAll
List of all domain user accounts for which a user profile is not specifiedSecurityAll
List of all domain user accounts for which a first name is specifiedSecurityAll
List of all domain user accounts for which a first name is not specifiedSecurityAll
List of all domain user accounts for which a surname is specifiedSecurityAll
List of all domain user accounts for which a surname is not specifiedSecurityAll
List of all user accounts for which a display name is specifiedSecurityAll
List of all user accounts for which a display name is not specifiedSecurityAll
List of all domain user accounts for which a description is specifiedSecurityAll
List of all domain user accounts for which a description is not specifiedSecurityAll
List of all domain user accounts for which an office is specifiedSecurityAll
List of all domain user accounts for which an office is not specifiedSecurityAll
List of all domain user accounts for which an office telephone number is specifiedSecurityAll
List of all domain user accounts for which an office telephone number is not specifiedSecurityAll
List of all domain user accounts for which an email address is specifiedSecurityAll
List of all domain user accounts for which an email address is not specifiedSecurityAll
List of all domain user accounts for which a web page is specifiedSecurityAll
List of all domain user accounts for which a web page is not specifiedSecurityAll
List of all user accounts for which an address street is specifiedSecurityAll
List of all user accounts for which an address street is not specifiedSecurityAll
List of all user accounts for which an address post office box is specifiedSecurityAll
List of all user accounts for which an address post office box is not specifiedSecurityAll
List of all user accounts for which an address city is specifiedSecurityAll
List of all user accounts for which an address city is not specifiedSecurityAll
List of all user accounts for which an address state is specifiedSecurityAll
List of all user accounts for which an address state is not specifiedSecurityAll
List of all user accounts for which an address zipcode is specifiedSecurityAll
List of all user accounts for which an address zipcode is not specifiedSecurityAll
List of all user accounts for which an address country is specifiedSecurityAll
List of all user accounts for which an address country is not specifiedSecurityAll
List of all domain user accounts for which a home telephone number is specifiedSecurityAll
List of all domain user accounts for which a home telephone number is not specifiedSecurityAll
List of all domain user accounts for which a pager number is specifiedSecurityAll
List of all domain user accounts for which a pager number is not specifiedSecurityAll
List of all domain user accounts for which a mobile phone number is specifiedSecurityAll
List of all domain user accounts for which a mobile phone number is not specifiedSecurityAll
List of all domain user accounts for which a fax number is specifiedSecurityAll
List of all domain user accounts for which a fax number is not specifiedSecurityAll
List of all domain user accounts for which an IP phone number is specifiedSecurityAll
List of all domain user accounts for which an IP phone number is not specifiedSecurityAll
List of all domain user accounts for which notes have been annotatedSecurityAll
List of all domain user accounts for which notes have not been annotatedSecurityAll
List of all domain user accounts for which a title is specifiedSecurityAll
List of all domain user accounts for which a title is not specifiedSecurityAll
List of all domain user accounts for which a department is specifiedSecurityAll
List of all domain user accounts for which a department is not specifiedSecurityAll
List of all domain user accounts for which a manager is specifiedSecurityAll
List of all domain user accounts for which a manager is not specifiedSecurityAll
List of all domain user accounts for which a company is specifiedSecurityAll
List of all domain user accounts for which a company is not specifiedSecurityAll
List of all domain user accounts for which direct reports are specifiedSecurityAll
List of all domain user accounts for which direct reports are not specifiedSecurityAll
List of all domain user accounts whose primary group is Domain UsersSecurityAll
List of all domain user accounts whose primary group is not Domain UsersSecurityAll
Individuals who can create domain user accountsAccessStd & Pro Only
Individuals who can delete domain user accountsAccessStd & Pro Only
Individuals who can reset domain user account passwordsAccessStd & Pro Only
Individuals who can disable domain user accountsAccessStd & Pro Only
Individuals who can unlock domain user accountsAccessStd & Pro Only




SECURITY GROUP MANAGEMENT*
ReportTypeEditions
List of all security groups SecurityAll
List of all built-in security groups SecurityAll
List of all domain local security groups SecurityAll
List of all global security groups SecurityAll
List of all universal security groups SecurityAll
List of all security groups created in the last few days SecurityAll
List of all security groups changed in the last few days SecurityAll
List of all groups deleted in the last few days SecurityAll
List of all security groups that have members SecurityAll
List of all security groups that have no members SecurityAll
List of all nested security groups SecurityAll
List of all security groups for which a manager is specified SecurityAll
List of all security groups for which a manager is not specified SecurityAll
List of all security groups for which a description is specified SecurityAll
List of all security groups for which a description is not specified SecurityAll
Individuals who can create security groupsAccessStd & Pro Only
Individuals who can delete security groupsAccessStd & Pro Only
Individuals who can modify security group membershipsAccessStd & Pro Only
Individuals who can modify security group scopesAccessStd & Pro Only
Individuals who can modify security group typesAccessStd & Pro Only

* NOTE – For each security group report, Gold Finger can also print the direct membership of all security groups.



CONTACT MANAGEMENT
ReportTypeEditions
List of all contacts SecurityAll
List of all contacts created in the last few days SecurityAll
List of all contacts changed in the last few days SecurityAll
List of all contacts deleted in the last few days SecurityAll
List of all contacts for which a description is specified SecurityAll
List of all contacts for which a description is not specified SecurityAll
List of all contacts for which an office is specified SecurityAll
List of all contacts for which an office is not specified SecurityAll
List of all contacts for which an office telephone number is specified SecurityAll
List of all contacts for which an office telephone number is not specified SecurityAll
List of all contacts for which an email address is specified SecurityAll
List of all contacts for which an email address is not specified SecurityAll
List of all contacts for which a web page is specified SecurityAll
List of all contacts for which a web page is not specified SecurityAll
List of all contacts for which an address street is specified SecurityAll
List of all contacts for which an address street is not specified SecurityAll
List of all contacts for which an address post office box is specified SecurityAll
List of all contacts for which an address post office box is not specified SecurityAll
List of all contacts for which an address city is specified SecurityAll
List of all contacts for which an address city is not specified SecurityAll
List of all contacts for which an address state is specified SecurityAll
List of all contacts for which an address state is not specified SecurityAll
List of all contacts for which an address zipcode is specified SecurityAll
List of all contacts for which an address zipcode is not specified SecurityAll
List of all contacts for which an address country is specified SecurityAll
List of all contacts for which an address country is not specified SecurityAll
List of all contacts for which a home telephone number is specified SecurityAll
List of all contacts for which a home telephone number is not specified SecurityAll
List of all contacts for which a pager number is specified SecurityAll
List of all contacts for which a pager number is not specified SecurityAll
List of all contacts for which a mobile phone number is specified SecurityAll
List of all contacts for which a mobile phone number is not specified SecurityAll
List of all contacts for which a fax number is specified SecurityAll
List of all contacts for which a fax number is not specified SecurityAll
List of all contacts for which an IP phone number is specified SecurityAll
List of all contacts for which an IP phone number is not specified SecurityAll
List of all contacts for which notes have been annotated SecurityAll
List of all contacts for which notes have not been annotated SecurityAll
List of all contacts for which a title is specified SecurityAll
List of all contacts for which a title is not specified SecurityAll
List of all contacts for which a department is specified SecurityAll
List of all contacts for which a department is not specified SecurityAll
List of all contacts for which a company is specified SecurityAll
List of all contacts for which a company is not specified SecurityAll
List of all contacts for which a manager is specified SecurityAll
List of all contacts for which a manager is not specified SecurityAll
List of all contacts for which direct reports have been specified SecurityAll
List of all contacts for which direct reports have not been specified SecurityAll
List of all contacts that belong to a group SecurityAll
List of all contacts that do not belong to a group SecurityAll




COMPUTER MANAGEMENT
ReportTypeEditions
List of all domain computer accounts SecurityAll
List of all enabled domain computer accounts SecurityAll
List of all disabled domain computer accounts SecurityAll
List of all domain controllers in a domain SecurityAll
List of all non domain controllers in a domain SecurityAll
List of all domain computer accounts that are trusted for delegation SecurityAll
List of all domain computer accounts that are trusted for unconstrained delegation SecurityAll
List of all domain computer accounts that are trusted for constrained delegation SecurityAll
List of all domain computer accounts created in the last few days SecurityAll
List of all domain computer accounts changed in the last few days SecurityAll
List of all domain computer accounts deleted in the last few days SecurityAll
List of all domain computer accounts for which a description is specified SecurityAll
List of all domain computer accounts for which a description is not specified SecurityAll
List of all domain computer accounts for which a location is specified SecurityAll
List of all domain computer accounts for which a location is not specified SecurityAll
List of all domain computer accounts for which a manager is specified SecurityAll
List of all domain computer accounts for which a manager is not specified SecurityAll
List of all domain computer accounts for which Kerberos name mappings are specified SecurityAll
List of all domain computer accounts for which Kerberos name mappings are not specified SecurityAll




EXCHANGE MANAGEMENT
ReportTypeEditions
List of all mailbox-enabled or mail-enabled accounts SecurityAll
List of all mailbox-enabled accounts SecurityAll
List of all mail-enabled accounts SecurityAll
List of all mail-enabled contacts SecurityAll
List of all mail-enabled groups SecurityAll
List of all mail-enabled security groups SecurityAll
List of all mail-enabled distribution groups SecurityAll
List of all mailbox-enabled or mail-enabled accounts created in the last few days SecurityAll
List of all mailbox-enabled or mail-enabled accounts changed in the last few days SecurityAll
List of all mailbox-enabled accounts created in the last few days SecurityAll
List of all mailbox-enabled accounts changed in the last few days SecurityAll
List of all mail-enabled accounts created in the last few days SecurityAll
List of all mail-enabled accounts changed in the last few days SecurityAll
List of all mail-enabled contacts created in the last few days SecurityAll
List of all mail-enabled contacts changed in the last few days SecurityAll
List of all mail-enabled groups created in the last few days SecurityAll
List of all mail-enabled groups changed in the last few days SecurityAll
List of all mail-enabled security groups created in the last few days SecurityAll
List of all mail-enabled security groups changed in the last few days SecurityAll
List of all mail-enabled distribution groups created in the last few days SecurityAll
List of all mail-enabled distribution groups changed in the last few days SecurityAll
List of all mailbox-enabled accounts for which proxy addresses are specified SecurityAll
List of all mail-enabled accounts for which proxy addresses are specified SecurityAll
List of all mail-enabled groups for which proxy addresses are specified SecurityAll
List of all mail-enabled security groups for which proxy addresses are specified SecurityAll
List of all mail-enabled distribution groups for which proxy addresses are specified SecurityAll
List of all mailbox-enabled accounts that are hidden from Exchange address lists SecurityAll
List of all mail-enabled accounts that are hidden from Exchange address lists SecurityAll
List of all mail-enabled contacts that are hidden from Exchange address lists SecurityAll
List of all mail-enabled groups that are hidden from Exchange address lists SecurityAll
List of all mail-enabled security groups that are hidden from Exchange address lists SecurityAll
List of all mail-enabled distribution groups that are hidden from Exchange address lists SecurityAll
List of all mailbox-enabled accounts with default sending message size restrictions specified SecurityAll
List of all mailbox-enabled accounts with custom sending message size restrictions specified SecurityAll
List of all mailbox-enabled accounts with default receiving message size restrictions specified SecurityAll
List of all mailbox-enabled accounts with custom receiving message size restrictions specified SecurityAll
List of all mailbox-enabled accounts that can accept messages from everyone SecurityAll
List of all mailbox-enabled accounts that can only accept messages from authenticated users SecurityAll
List of all mailbox-enabled accounts that can only accept messages from specific users SecurityAll
List of all mailbox-enabled accounts that cannot accept messages from at least one user SecurityAll
List of all mailbox-enabled accounts whose emails are not forwarded SecurityAll
List of all mailbox-enabled accounts whose emails are forwarded SecurityAll
List of all mailbox-enabled accounts whose emails are delivered and forwarded SecurityAll
List of all mailbox-enabled accounts with default recipient limits specified SecurityAll
List of all mailbox-enabled accounts with custom recipient limits specified SecurityAll
List of all mailbox-enabled accounts with default storage limits specified SecurityAll
List of all mailbox-enabled accounts with custom storage limits specified SecurityAll
List of all mailbox-enabled accounts with a storage limit warning issuance threshold specified SecurityAll
List of all mailbox-enabled accounts with a storage limit send prohibition threshold specified SecurityAll
List of all mailbox-enabled accounts with a storage limit send and receive prohibition threshold specified SecurityAll
List of all mailbox-enabled accounts with default deleted-item retention settings specified SecurityAll
List of all mailbox-enabled accounts with custom deleted-item retention settings specified SecurityAll
List of all mailbox-enabled accounts with Outlook Web Access enabled SecurityAll
List of all mailbox-enabled accounts with Outlook Web Access disabled SecurityAll
List of all mailbox-enabled accounts with POP3 access enabled SecurityAll
List of all mailbox-enabled accounts with POP3 access disabled SecurityAll
List of all mailbox-enabled accounts with IMAP4 access enabled SecurityAll
List of all mailbox-enabled accounts with IMAP4 access disabled SecurityAll
List of all mailbox-enabled accounts with MAPI access enabled SecurityAll
List of all mailbox-enabled accounts with MAPI access enabled in cache-mode only SecurityAll
List of all mailbox-enabled accounts with MAPI access disabled SecurityAll
List of all mailbox-enabled accounts with Outlook Mobile Access enabled SecurityAll
List of all mailbox-enabled accounts with Outlook Mobile Access disabled SecurityAll
List of all mailbox-enabled accounts with User Initiated Sync enabled for Outlook Mobile Access SecurityAll
List of all mailbox-enabled accounts with User Initiated Sync disabled for Outlook Mobile Access SecurityAll
List of all mailbox-enabled accounts with Up-to-date Notifications enabled for Outlook Mobile Access SecurityAll
List of all mailbox-enabled accounts with Up-to-date Notifications disabled for Outlook Mobile Access SecurityAll




CONTAINER MANAGEMENT
ReportTypeEditions
List of all containers SecurityAll
List of all containers created in the last few days SecurityAll
List of all containers changed in the last few days SecurityAll
List of all containers deleted in the last few days SecurityAll
List of all containers for which a description is specified SecurityAll
List of all containers for which a description is not specified SecurityAll




GROUP POLICY MANAGEMENT
ReportTypeEditions
List of all group policy objects SecurityAll
List of all enabled group policy objects SecurityAll
List of all disabled group policy objects SecurityAll
List of all group policy objects whose user settings are disabled SecurityAll
List of all group policy objects whose computer settings are disabled SecurityAll
List of all group policy objects whose user and computer settings are disabled SecurityAll
List of all group policy objects created in the last few days SecurityAll
List of all group policy objects changed in the last few days SecurityAll
List of all group policy objects deleted in the last few days SecurityAll




ORGANIZATIONAL UNIT MANAGEMENT
ReportTypeEditions
List of all organizational units SecurityAll
List of all organizational units created in the last few days SecurityAll
List of all organizational units changed in the last few days SecurityAll
List of all organizational units deleted in the last few days SecurityAll
List of all organizational units to which group policies are explicitly linked SecurityAll
List of all organizational units to which group policies are not explicitly linked SecurityAll
List of all organizational units for which a manager is specified SecurityAll
List of all organizational units for which a manager is not specified SecurityAll
List of all organizational units for which a description is specified SecurityAll
List of all organizational units for which a description is not specified SecurityAll
Individuals who can create organizational unitsAccessStd & Pro Only
Individuals who can delete organizational unitsAccessStd & Pro Only
Individuals who can change the list of group policies linked to organizational unitsAccessStd & Pro Only
Individuals who can disable group policies (GPOs) linked to organizational unitsAccessStd & Pro Only
Individuals who can change the precedence of GPOs linked to organizational unitsAccessStd & Pro Only




SERVICE CONNECTION POINT MANAGEMENT
ReportTypeEditions
List of all service connection points SecurityAll
List of all service connection points created in the last few days SecurityAll
List of all service connection points changed in the last few days SecurityAll
List of all service connection points deleted in the last few days SecurityAll
List of all service connection points for which keywords are specified SecurityAll
List of all service connection points for which keywords are not specified SecurityAll
List of all service connection points for which DNS service names are specified SecurityAll
List of all service connection points for which DNS service names are not specified SecurityAll
List of all service connection points for which service bindings are specified SecurityAll
List of all service connection points for which service bindings are not specified SecurityAll
Individuals who can create service connection pointsAccessStd & Pro Only
Individuals who can delete service connection pointsAccessStd & Pro Only
Individuals who can change a service connection point's keywordsAccessStd & Pro Only
Individuals who can change a service connection point's service DNS nameAccessStd & Pro Only
Individuals who can change a service connection point's security permissionsAccessStd & Pro Only




DOMAIN SECURITY POLICY MANAGEMENT
ReportTypeEditions
Individuals who can change the maximum password age for domain user accountsAccessStd & Pro Only
Individuals who can change the minimum password age for domain user accountsAccessStd & Pro Only
Individuals who can change the lockout duration for domain user accountsAccessStd & Pro Only
Individuals who can change the lockout threshold age for domain user accountsAccessStd & Pro Only
Individuals who can change the lockout observation window for domain user accountsAccessStd & Pro Only




PRINTER MANAGEMENT
ReportTypeEditions
List of all printers published in Active Directory SecurityAll
List of all printers published in Active Directory in the last few days SecurityAll
List of all printers published in Active Directory which changed in the last few days SecurityAll
List of all printers published in Active Directory that were deleted in the last few days SecurityAll
List of all printers published in Active Directory for which a manager is specified SecurityAll
List of all printers published in Active Directory for which a manager is not specified SecurityAll
List of all printers published in Active Directory which can print in color SecurityAll
List of all printers published in Active Directory which cannot print in color SecurityAll
List of all printers published in Active Directory which can staple SecurityAll
List of all printers published in Active Directory which cannot staple SecurityAll
List of all printers published in Active Directory which can print double-sided SecurityAll
List of all printers published in Active Directory which cannot print double-sided SecurityAll
List of all printers published in Active Directory which support a specific resolution SecurityAll
List of all printers published in Active Directory which support a specific printing speed SecurityAll
List of all printers published in Active Directory which support only Landscape printing SecurityAll
List of all printers published in Active Directory which support only Portrait printing SecurityAll
List of all printers published in Active Directory which support both Landscape and Portrait printing SecurityAll
List of all printers published in Active Directory for which an IP port is specified SecurityAll
List of all printers published in Active Directory for which an IP port is not specified SecurityAll
List of all printers published in Active Directory which support direct printing SecurityAll
List of all printers published in Active Directory which support printing while spooling SecurityAll
List of all printers published in Active Directory which support printing after spooling SecurityAll




TRUST MANAGEMENT
ReportTypeEditions
List of all trust relationships SecurityAll
List of all trust relationships created in the last few days SecurityAll
List of all trust relationships changed in the last few days SecurityAll
List of all enabled trust relationships SecurityAll
List of all disabled trust relationships SecurityAll
List of all parent/child trust relationships SecurityAll
List of all external trust relationships SecurityAll
List of all cross-forest trust relationships SecurityAll
List of all trust relationships to Kerberos realms SecurityAll
List of all inbound-only trust relationships SecurityAll
List of all outbound-only trust relationships SecurityAll
List of all bi-directional trust relationships SecurityAll
List of all transitive trust relationships SecurityAll
List of all non-transitive trust relationships SecurityAll
List of all trust relationships for which SID filtering is enabled SecurityAll
List of all trust relationships for which SID filtering is disabled SecurityAll
List of all trust relationships for which Selective Authentication is enabled SecurityAll




ACTIVE DIRECTORY (AD) ACL MANAGEMENT
ReportTypeEditions
List of all Active Directory objects on which a security principal has permissions SecurityAll
List of all Active Directory objects on which a security principal has allow permissions SecurityAll
List of all Active Directory objects on which a security principal has deny permissions SecurityAll
List of all Active Directory objects on which a security principal has explicit permissions SecurityAll
List of all Active Directory objects on which a security principal has inherited permissions SecurityAll
List of all Active Directory objects on which a security principal has list child permissions SecurityAll
List of all Active Directory objects on which a security principal has list object permissions SecurityAll
List of all Active Directory objects on which a security principal has read property permissions SecurityAll
List of all Active Directory objects on which a security principal has write property permissions SecurityAll
List of all Active Directory objects on which a security principal has create child permissions SecurityAll
List of all Active Directory objects on which a security principal has standard delete permissions SecurityAll
List of all Active Directory objects on which a security principal has delete child permissions SecurityAll
List of all Active Directory objects on which a security principal has delete tree permissions SecurityAll
List of all Active Directory objects on which a security principal has read permissions permissions SecurityAll
List of all Active Directory objects on which a security principal has modify permissions permissions SecurityAll
List of all Active Directory objects on which a security principal has modify owner permissions SecurityAll
List of all Active Directory objects on which a security principal has extended right permissions SecurityAll
List of all Active Directory objects on which a security principal has validated write permissions SecurityAll
 Compare All Editions Download Free Edition 

Copyright Paramount Defenses Inc. 2006 – 2010. All Rights Reserved.