Buy

Home > Products > Gold Finger > Active Directory Membership Auditor

❮ ❯

Active Directory Membership Auditor

The world's simplest cyber security solution that can effortlessly audit group memberships in Active Directory.

"We are very pleased to see Paramount Defenses, a valued Microsoft partner, offer an innovative security solution (in Gold Finger) that helps enhance security and compliance in Active Directory environments."

Charles Coates, Senior Product Manager
Identity and Security Business Group

Overview

Organizations need to be able to easily and reliably enumerate and audit the complete membership of thousands of their Active Directory security groups, usually to provision and control access, maintain security and demonstrate compliance.

Active Directory Membership Auditor is a specialized audit tool designed by former Microsoft Program Manager for Active Directory Security to help IT groups and personnel easily, instantly and trustworthily fulfill this need.

It automates the accurate enumeration, audit, export and documentation of Active Directory security group memberships, as well as the ability to generate customizable professional-grade audit reports in PDF format, all at the touch of a button.

Active Directory User and
Group Membership Audit

Security groups play a vital role in organizational security because they are used to control access to the entirety of an organization's IT assets. At organizations that operate on Active Directory, the entirety of an organization's security groups are stored in Active Directory, and organizations need to be able to enumerate/audit group memberships.

Our Active Directory Group Membership Auditor fully automates the complete enumeration of domain security groups in Active Directory, making it easy for organizations to enumerate and audit their Active Directory group memberships.

Our Active Directory Group Membership Auditor automates the entire process of group membership enumeration, including the expansion of any/all nested groups as well as the detection of any/all circular group memberships, thus automating a basic and essential cyber security need for organizations, delivering cost, time and effort efficiencies.

Active Directory
Group Membership Audit

Active Directory Membership Auditor tooling is specifically built to help organizations effortlessly enumerate/audit Active Directory security group memberships, and it can instantly generate complete group membership audit reports, such as -

List all direct members of an Active Directory security group
List the fully expanded membership of an Active Directory security group
List all security groups to which a specific domain [user | computer ] account belongs

For every security principal that is found to be a member by virtue of a nested group membership, it can also list the precise nested security group via which it has acquired membership in a specific Active Directory security group.

Report results can be filtered based on security principal type and the results can be exported to a CSV file. The tool can also generate professional-grade fully customizable PDF reports, with a custom title, description, logo and a password.

Active Directory Membership Auditor - User View

Active Directory
User's Membership Audit

Active Directory Membership Auditor can also enumerate/audit the list of all domain security groups and well-known security principals to which a specific Active Directory domain user or computer account currently belongs.

Insight into the domain security groups to which a domain account belongs has several uses, such as being able to assess what IT assets a user may currently be able to access by virtue of his/her domain security group memberships.

Such a report can also be helpful when performing access audits, access assessments or access related investigations.

For instance, a user-focused group membership report can help verify whether or not a specific domain account may currently be a member of a specific domain security group, and this can be useful in investigating or troubleshooting various access related issues, such as How may a specific domain user account have had access to a specific IT asset?

Report results can be exported to a CSV file as well as to a read-only PDF file, with optional password-protection.

Features

Group Membership Enumeration

Enumerate complete membership of any domain security group

User Membership Enumeration

Enumerate complete* list of all groups to which a user belongs

Active Directory Direct and Nested Security Group Enumeration

Direct and Nested Enumeration

Enumerate and identify both direct and all nested group members

Circular Loop Detection

Detect circularly nested group memberships and avoid infinite loops

Instant Active Directory Group Membership Data Exports

Instant Data Exports

Instantly export group memberships and create customized PDF reports

Technical Summary

Active Directory Membership Auditor fully automates the accurate enumeration and audit of Active Directory group memberships, taking into account all technical factors such as group nesting and circular loops, to make it easier for organizations to assess and manage group memberships and access provisioned in their Active Directory environments.

Benefits

Instant Active Directory Group Membership Audits

Instant Audits

Instantly audit Active Directory group memberships

Real-time Active Directory Group Membership Data

Real-time Data

Easily audit any Active Directory group's membership in real-time

Data Archival

Effortlessly export, furnish and archive audit results within minutes

Zero Requirements

Perform audits without requiring admin rights, agents or services

Peace of Mind

Have peace of mind knowing you're using a trustworthy tool made in USA

Example Reports

The following real-world examples illustrate the Active Directory Membership Auditor's capabilities -

Enumerate the direct membership of the Domain Admins security group.
Enumerate the complete (direct and indirect) membership of the Domain Admins security group.
Identify all domain security groups nested within the All Employees domain security.
Identify all domain security groups to which the CEO's domain user account belongs.
Identify all domain security groups to which a Domain Admin's domain user account belongs.
Find out how a temporary contractor's account is a member of the Domain Admins security group.
Determine how the Temp Contractors security group is a member of the All Employees security group.
Generate PDF reports documenting the complete group membership of all default privileged groups in Active Directory.
Generate a PDF report that documents the groups to which the Chief Financial Officer's (CFOs) domain user account belongs .
Export the direct or complete membership of any domain security group, or that of all groups to which any account belongs.

Requirements and Licensing

Active Directory Membership Auditor can be instantly downloaded, installed and run on any Windows computer. Its use does not require any administrative privileges, any changes to or any knowledge of Active Directory.

The tool is licensed on a subscription model, and can be licensed on a quarterly or annual basis.

"We use the Gold Finger from Paramount Defenses to fulfill our Active Directory Audit needs. It saves us a lot of time and effort and we would recommend it to anyone who needs to perform Active Directory audits trustworthily and cost-effectively. Great product, great support."

Sean Seeliger, Architect