Domain User Account Management Security Reports

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit.

This report lets you identify and document the list of all enabled domain user accounts in an Active Directory domain, container or organizational unit.

This report lets you identify and document the list of all disabled domain user accounts in an Active Directory domain, container or organizational unit.

This report lets you identify and document the list of all locked domain user accounts in an Active Directory domain, container or organizational unit.

This report lets you identify and document the list of all unlocked domain user accounts in an Active Directory domain, container or organizational unit.

This report lets you identify and document the list of all administrative (privileged) domain user accounts in an Active Directory domain, container or organizational unit.

An administrative (privileged) user account is one that has elevated privileges in the Active Directory, and which, for all practical purposes is as powerful as a Domain Admin.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that have logged on in the last few (specifiable, 0 – 5000) days.

This report does not rely on the lastLogonTimestamp attribute, but in fact is based on True Last Logon in Active Directory and thus takes into values from all domain-controllers in the domain, delivering 100% accurate results.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that have not logged on in the last few (specifiable, 0 – 5000) days.

This report does not rely on the lastLogonTimestamp attribute, but in fact is based on True Last Logon in Active Directory and thus takes into values from all domain-controllers in the domain, delivering 100% accurate results.

This report can also be used to identify and document the list of all stale user accounts in an Active Directory environment.

The staleness of a domain user account is generally relative and varies from organization to organization. For some organizations it may be 30 days, whereas for others it may be 180 days. With Gold Finger, you have the flexibility to define your own measure of staleness, and you can easily specify any value from 0 to 365 days.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that have never logged on.

This report does not rely on the lastLogonTimestamp attribute, but in fact is based on True Last Logon in Active Directory and thus takes into values from all domain-controllers in the domain, delivering 100% accurate results.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that have logged on at least once.

This report does not rely on the lastLogonTimestamp attribute, but in fact is based on True Last Logon in Active Directory and thus takes into values from all domain-controllers in the domain, delivering 100% accurate results.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that failed a logon attempt in the last few (specifiable, 0 – 5000) days.

This report is also based on True Last Logon in Active Directory and thus takes into values from all domain-controllers in the domain, delivering 100% accurate results.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that were created in the last few (specifiable, 0 – 5000) days.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that were modified in the last few (specifiable, 0 – 5000) days.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that were deleted in the last few (specifiable, 0 – 60) days.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that have an expiration date set.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that do not have an expiration date set.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that expired in the last few (specifiable, 0 – 5000) days.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that are set to expire in the next few (specifiable, 0 – 5000) days.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that do require passwords to logon.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that do not require passwords to logon.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, whose passwords never expire.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, whose password must be changed at next logon.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, whose password was changed in the last few (specifiable, 0 – 5000) days.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, whose password is stored using reversible encryption.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that require Smart cards for login.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that are sensitive and cannot be delegated for impersonation.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that are not sensitive and can be delegated for impersonation.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that can logon to any workstation.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that can only logon to specific workstations.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, for which specific logon hours have not been specified.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, for which specific logon hours have been specified.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, that can logon anytime.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, for which a logon script is specified.

This report lets you identify and document the list of all domain user accounts in an Active Directory domain, container or organizational unit, for which no logon script is specified.