Try now

Active Directory Effective Permissions Calculator

Instantly and accurately calculate Active Directory effective permissions on any Active Directory object, in any partition, at the touch of a button.

"We are very pleased to see Paramount Defenses, a valued Microsoft partner, offer an innovative security solution (in Gold Finger) that helps enhance security and compliance in Active Directory environments."

Charles Coates, Senior Product Manager      
Identity and Security Business Group

Microsoft Logo
Active Directory Expert

Overview

Organizations have a mission-critical cyber security need to be able to accurately audit effective permissions on thousands of objects in Active Directory to -

  1. Audit, Secure and Defend Active Directory

  2. Audit Privileged Access in Active Directory

  3. Implement Privileged Access Management

  4. Attain and Maintain Least Privileged Access

  5. Securely Manage Identities and Access in AD

  6. Manage Risk and Demonstrate Regulatory Compliance




Active Directory Effective Permissions Calculator uniquely empowers IT personnel to fulfill this mission-critical need.


Active Directory Effective Permissions Calculator

Active Directory Effective Permissions Calculator is a specialized audit tool designed by former Microsoft Program Manager for Active Directory Security to help IT personnel accurately calculate effective permissions in Active Directory.

Active Directory Effective Permissions Calculator

Active Directory Effective Permissions Calculator

Technical Summary

Technical Summary

Active Directory Effective Permissions Calculator accomplishes the rare technical feat of automating the accurate determination of effective permissions on individual Active Directory objects, to help identify exactly who actually has what access on any and every object in any Active Directory partition, as well as identifying how they have this access.

Features

Active Directory Effective Permissions
Accurate Effective Permissions Analysis

Accurately calculate effective permissions on Active Directory objects

Complete Effective Permissions Analysis
Complete Effective Permissions Analysis

Determine complete set of effective permissions allowed on an AD object

Real-time Fully-Automated Analysis
Real-time Fully-Automated Analysis

Instantly determine effective permissions on any AD object in real-time

Source Identification
Source Identification

Identify the exact permission that entitles a user to an effective permission

Export to CSV
Export to CSV

Export effective permissions data for analysis, comparison and archival

Example Reports

The following real-world examples illustrate the Active Directory Effective Permissions Calculator's unique capabilities -

  • Find out exactly who has what effective permissions on the Domain Admins privileged group in Active Directory.
  • Determine exactly who has Write Property - Member effective permissions on the Domain Admins group.
  • Find out exactly who has Change Schema Master extended right effective permissions on the Schema partition root.
  • Find out exactly who has Get Replication Changes All extended right effective permissions on the domain root object.
  • Identify exactly who has Delete or Delete Tree effective permissions on a top-level OU containing thousands of objects.
  • Determine exactly who has Create Child - User effective permissions on a top-level organizational unit in Active Directory.
  • Find out exactly who has Modify Permissions effective permissions on the domain root object or on the AdminSDHolder object.
  • Find out exactly who has Write Property - userAccountControl effective permissions on a critical server's domain computer object.
  • Determine exactly who has Apply Group Policy extended right effective permissions on the Domain Controllers organizational unit.
  • Determine exactly who has Reset Password extended right effective permissions on the default Administrator domain user account.

Benefits

Active Directory Effective Permissions
Accurately Audit AD Effective Permissions

Accurately calculate effective permissions on AD objects

Audit Privileged Access in Active Directory
Audit Privileged Access on AD objects

Find out who actually has what privileged access on AD objects

Secure Active Directory
Secure Your Foundational Active Directory

Assess and lockdown access on your entire AD attack surface

Privileged Access Management
Complete Steps 1, 2 and 3 of your PAM Journey

Accurately discover privileged users in AD, secure them and control access

Demonstrate Regulatory Compliance
Demonstrate Regulatory Compliance

Correctly demonstrate compliance concerning privileged access in AD

We Care Deeply

Requirements and Licensing

Active Directory Effective Permissions Calculator can be instantly downloaded, installed and run on any Windows computer. Its use does not require any admin privileges, any changes to Active Directory or any knowledge of Active Directory.


The tool is licensed on a subscription model on a monthly, quarterly or annual basis. Pricing is available upon request.

"We use the Gold Finger from Paramount Defenses to fulfill our Active Directory Audit needs. It saves us a lot of time and effort and we would recommend it to anyone who needs to perform Active Directory audits trustworthily and cost-effectively. Great product, great support."

Sean Seeliger, Architect

Our Global Customers

  • Australian Government
  • United States Treasury
  • British Government
  • Government of Canada
  • British Petroleum
  • Ernst and Young
  • Saudi Arabian Monetary Agency
  • Juniper Networks
  • U.S. Department of Defense
  • Microsoft Corporation
  • United Nations
  • Quantium
  • Nestle
  • IBM Corporation
  • U.S. Federal Aviation Administration
  • Columbia University

Your Privacy

We use cookies to provide you the best online experience. Please let us know if you accept these cookies.