IT Windows Administrators

Gold Finger helps Windows IT Administrators efficiently and reliably assess, analyze and maintain complete control of all aspects of their Active Directory.

With Gold Finger IT Admins can instantly –

1. Determine exactly who is delegated which identity and access management tasks in their Active Directory, where and how
2. Eliminate all unauthorized delegations / access grants in their Active Directory before they can be exploited to compromise security
3. Assess and verify critical administrative delegations, and find out who all can reset the password of their own domain user accounts
4. Identify all active and inactive, recently created and deleted, stale, locked, disabled and unmanaged user accounts in Active Directory
5. Enumerate all Active Directory DCs and domain-joined computers, including all unmanaged, stale, sensitive, vulnerable and new ones
6. List all security groups (including nested groups) stored in Active Directory and view their status, type, managers and memberships
7. Uncover all Active Directory objects on which a specific user or a security group might have sensitive security permissions granted
8. Identify all Organizational Units (OUs) and containers, including all unmanaged, empty and large OUs, and their linked group policies
9. View and analyze all Active Directory security trust relationships, service connection points, group policies, and published printers.
10. Analyze the Active Directory Schema for critical security changes
11. Generate printable security audit and regulatory compliance reports that document all above aspects of Active Directory management

Most importantly, Gold Finger helps Windows IT Administrators instantly and precisely find out exactly Who Can Do What in Active Directory, and How So.

This information is mission-critical to security because a single unauthorized grant in Active Directory could be the starting point of a sophisticated sequential privilege escalation based attack that could result in a malicious perpetrator obtaining complete administrative privilege in Active Directory and subsequently swiftly compromising the entire IT infrastructure within minutes.

Everyone already has read access to Active Directory, so, with the right tools, any insider could find unauthorized grants in Active Directory. One unauthorized access grant in Active Directory is usually all that a malicious perpetrator needs to launch a sophisticated privilege-escalation based attack.  Just, One.

Only Gold Finger can instantly and accurately assess resultant-access in Active Directory and find real unauthorized access grants in Active Directory.