Domain Computer Account Management Security Reports

Gold Finger automatically displays the DNS-Name and the Operating System for all computers.

1. All domain computer accounts

   This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit.

2. All enabled domain computer accounts

   This report lets you identify and document the list of all enabled domain computer accounts in an Active Directory domain, container or organizational unit.

3. All disabled domain computer accounts

   This report lets you identify and document the list of all disabled domain computer accounts in an Active Directory domain, container or organizational unit.

4. All domain computer accounts that have logged on in the last few days

   This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit, that have logged on in the last few (specifiable, 0 – 365) days.

   This report does not rely on the lastLogonTimestamp attribute, but in fact is based on True Last Logon in Active Directory and thus takes into values from all domain-controllers in the domain, delivering 100% accurate results.

5. All domain computer accounts that have not logged on in the last few days

   This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit, that have not logged on in the last few (specifiable, 0 – 365) days.

   This report does not rely on the lastLogonTimestamp attribute, but in fact is based on True Last Logon in Active Directory and thus takes into values from all domain-controllers in the domain, delivering 100% accurate results.

   This report can also be used to identify and document the list of all stale computer accounts in an Active Directory environment.

   The staleness of a domain computer account is generally relative and varies from organization to organization. For some organizations it may be 30 days, whereas for others it may be 180 days. With Gold Finger, you have the flexibility to define your own measure of staleness, and you can easily specify any value from 0 to 365 days.

6. All domain computer accounts that have never logged on

   This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit, that have never logged on.

   This report does not rely on the lastLogonTimestamp attribute, but in fact is based on True Last Logon in Active Directory and thus takes into values from all domain-controllers in the domain, delivering 100% accurate results.

7. All domain computer accounts that have logged on at least once

   This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit, that have logged on at least once.

   This report does not rely on the lastLogonTimestamp attribute, but in fact is based on True Last Logon in Active Directory and thus takes into values from all domain-controllers in the domain, delivering 100% accurate results.

8. All domain computer accounts created in the last few days

   This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit, that were created in the last few (specifiable, 0 – 365) days

9. All domain computer accounts changed in the last few days

   This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit, that were modified in the last few (specifiable, 0 – 365) days

10. All domain computer accounts deleted in the last few days

    This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit, that were deleted in the last few (specifiable, 0 – 60) days

11. All domain controllers in a domain

    This report lets you identify and document the list of all domain controllers in an Active Directory domain, container or organizational unit.

12. All domain computer accounts that are trusted for delegation

    This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit, that are trusted for delegation.

13. All domain computer accounts that are trusted for unconstrained delegation

    This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit, that are trusted for unconstrained delegation.

14. All domain computer accounts that are trusted for constrained delegation

    This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit, that are trusted for constrained delegation.

15. All domain computer accounts for which Kerberos name mappings are specified

    This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit, for which Kerberos name mappings are specified.

16. All domain computer accounts for which Kerberos name mappings are not specified

    This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit, for which Kerberos name mappings are not specified.

17. All domain computer accounts for which a description is not specified

    This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit, for which a description is not specified.

18. All domain computer accounts for which a location is not specified

    This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit, for which a location is not specified.

19. All domain computer accounts for which a manager is not specified

    This report lets you identify and document the list of all domain computer accounts in an Active Directory domain, container or organizational unit, for which a manager is not specified.

4 Additional Reports –

In addition Gold Finger also offers the following 4 general domain computer account management reports –

20. All non domain controllers in a domain
21. All domain computer accounts for which a description is specified
22. All domain computer accounts for which a location is specified
23. All domain computer accounts for which a manager is specified