Active Directory Membership Auditor

Buy

"We are very pleased to see Paramount Defenses, a valued Microsoft partner, offer an innovative security solution (in Gold Finger) that helps enhance security and compliance in Active Directory environments."

Charles Coates, Senior Product Manager
Identity and Security Business Group

Active Directory Membership Auditor

Overview

Organizations need to be able to easily and reliably enumerate and audit the complete membership of thousands of their Active Directory security groups, usually to provision and control access, maintain security and demonstrate compliance.

Active Directory Membership Auditor is a specialized audit tool designed by former Microsoft Program Manager for Active Directory Security to help IT groups and personnel easily, instantly and trustworthily fulfill this need.

It automates the accurate enumeration, audit, export and documentation of Active Directory security group memberships, as well as the ability to generate customizable professional-grade audit reports in PDF format, all at the touch of a button.

Features

Group Membership Enumeration

Enumerate complete membership of any domain security group

User Membership Enumeration

Enumerate complete* list of all groups to which a user belongs

Direct and Nested Enumeration

Enumerate and identify both direct and all nested group members

Circular Loop Detection

Detect circularly nested group memberships and avoid infinite loops

Instant Data Exports

Instantly export group memberships and create customized PDF reports

Technical Summary

Active Directory Membership Auditor fully automates the accurate enumeration and audit of Active Directory group memberships, taking into account all technical factors such as group nesting and circular loops, to make it easier for organizations to assess and manage group memberships and access provisioned in their Active Directory environments.

Benefits

Instant Audits

Instantly audit Active Directory group memberships

Real-time Data

Easily audit any Active Directory group's membership in real-time

Data Archival

Effortlessly export, furnish and archive audit results within minutes

Zero Requirements

Perform audits without requiring admin rights, agents or services

Peace of Mind

Have peace of mind knowing you're using a trustworthy tool made in USA

Example Reports

The following real-world examples illustrate the Active Directory Membership Auditor's capabilities -

Enumerate the direct membership of the Domain Admins security group.
Enumerate the complete (direct and indirect) membership of the Domain Admins security group.
Identify all domain security groups nested within the All Employees domain security.
Identify all domain security groups to which the CEO's domain user account belongs.
Identify all domain security groups to which a Domain Admin's domain user account belongs.
Find out how a temporary contractor's account is a member of the Domain Admins security group.
Determine how the Temp Contractors security group is a member of the All Employees security group.
Generate PDF reports documenting the complete group membership of all default privileged groups in Active Directory.
Generate a PDF report that documents the groups to which the Chief Financial Officer's (CFOs) domain user account belongs .
Export the direct or complete membership of any domain security group, or that of all groups to which any account belongs.

Requirements and Licensing

Active Directory Membership Auditor can be instantly downloaded, installed and run on any Windows computer. Its use does not require any admin privileges, any changes to or any knowledge of Active Directory.

The tool is licensed on a subscription model, and can be licensed on a monthly, quarterly or annual basis.

"We use the Gold Finger from Paramount Defenses to fulfill our Active Directory Audit needs. It saves us a lot of time and effort and we would recommend it to anyone who needs to perform Active Directory audits trustworthily and cost-effectively. Great product, great support."

Sean Seeliger, Architect