Active Directory ACL Exporter

Buy

"We are very pleased to see Paramount Defenses, a valued Microsoft partner, offer an innovative security solution (in Gold Finger) that helps enhance security and compliance in Active Directory environments."

Charles Coates, Senior Product Manager
Identity and Security Business Group

Active Directory ACL Exporter

Overview

Organizations often need to be able to export the access control lists (ACLs) that protect the entirety of all objects in their foundational Active Directory, usually to perform security permissions analysis, make comparisons or archive AD ACLs.

Active Directory ALC Exporter is a specialized audit tool designed by former Microsoft Program Manager for Active Directory Security to help IT groups and personnel easily, instantly and trustworthily fulfill this need.

It automates the retrieval and export of Active Directory ACLs, both DACLs and SACLs, both domain-wide and OU-wide, as well as based on fully customizable scopes via configurable LDAP filters, all at a button's touch.

Features

One Button Active Directory ACL Export

Easily and instantly export single, multiple or domain-wide ACLs

Domain-wide Active Directory ACL Export

Instantly export ACLs of all objects in an Active Directory domain

Customizable Active Directory ACL Export

Use LDAP filters to customize scope of ACL exports

Active Directory ACL and SACL Exports

Easily export both Active Directory ACLs and SACLs

Rich, analyzable Active Directory ACL exports

Exported ACLs contain individual permissions in unique columns

Technical Summary

Active Directory ACL Exporter fully automates on-demand retrieval and export of Active Directory access control lists, both ACLs and SACLs, domain-wide, OU-wide as well as based on customizable scopes configurable via LDAP filters.

Benefits

Easily Export Active Directory ACLs

View, sort, analyze and export the ACL of any Active Directory object

Instantly Export Active Directory ACLs

Instantly perform domain-wide Active Directory ACL exports/dumps

Customize Scope of ACL Exports

Completely customize the scope of ACL exports based on LDAP filters

Zero Requirements

Perform audits without requiring admin rights, agents or services

Peace of Mind

Have peace of mind knowing you're using a trustworthy tool made in USA

Example Reports

The following real-world examples illustrate the Active Directory ACL Viewer and Exporter's capabilities -

Instantly export the security permissions/ACLs of all objects in the root.local Active Directory domain.
Easily export the security permissions/ACLs protecting all Active Directory domain security groups.
Dump/export the Active Directory security permissions/ACLs on all objects whose ACLs are protected.
Easily export the security permissions/ACLs protecting all executive (CEO, CFO, etc.) accounts and privileged users.
Instantly export the security permissions/ACLs protecting the domain user accounts of everyone in the IT department.
Instantly export Active Directory security permissions/ACLs protecting all Organizational Units in an Active Directory domain.
Easily export the security permissions/ACLs protecting all Active Directory objects that are owned by the Administrators group.
Instantly export the security permissions/ACLs on all domain computer accounts in the child.root.local Active Directory domain.
Obtain a snapshot of all Active Directory security permissions/ACLs protecting the Configuration, Schema and domain partitions.
Easily export the security permissions/ACLs protecting all service connection points published by an AD-integrated application.

Requirements and Licensing

Active Directory ACL Exporter can be instantly downloaded, installed and run on any Windows computer. Its use does not require any admin privileges, any changes to or any knowledge of Active Directory.

The tool is licensed on a subscription model, and can be licensed on a monthly, quarterly or annual basis.

"We use the Gold Finger from Paramount Defenses to fulfill our Active Directory Audit needs. It saves us a lot of time and effort and we would recommend it to anyone who needs to perform Active Directory audits trustworthily and cost-effectively. Great product, great support."

Sean Seeliger, Architect