ADsecurity

What is ADsecurity?

Identify and repair common Active Directory security holes!

ADsecurity gives administrators the ability to easily document, locate, and fix network security issues. And with a simple, client-only installation, ADsecurity provides network security management without servers, agents, or other complications.

AD Security Reports#

The hardest part of getting network security rights is figuring out where the problems are. After all, no one says when they have access rights they shouldn't have. And, of course, this information is the first thing auditors want to find out: that is, who has access to what and whether they really need that access. ADsecurity is loaded with reports to answer that exact question in just a few mouse clicks.

ADsecurity comes with hundreds of built-in reports, including:

Delete rights - shows who has the authority to delete AD objects, files, or mailboxes

Group membership rights - shows who has the authority to modify group memberships

High-risk curators - groups that contain all or most users

Inheritance issues - objects whose inheritance flag has changed from its default state

Non-default security - shows all access rights that are not part of the object's default set

Reset password rights - users with the right to change or reset passwords

Unusual owners - all objects with unexpected owners (i.e. non-administrators)

ADsecurity Tools

Documenting your current security and identifying areas that need to be improved is only half the puzzle. The true power of ADsecurity is its ability to make changes to ACLs across your network, eliminating the need to thoroughly address issues one by one. ADsecurity has 2 main tools to do this:

Scan and Clean

Detect user names that appear in ACLs

Detect user names that appear in the Owner field

Detect computer names that appear in ACLs

Detect computer names that appear in the Owner field

Detect empty ACLs (that is, deny access to all users)

Detect missing ACLs (that is, open access to all users)

Detect and repair deleted objects in ACEs

Detect and repair unknown SIDs on ACEs (i.e., possibly deleted objects)

Create an Undo file to easily restore ACLs back to their original settings

Search and replace

Replace an object in ACLs across your network with another object

Remove all instances of an object that appear in ACLs

Add an object to ACLs whenever another object appears

Replace objects in ACLs, Owner fields, or even Share Permissions

Create an Undo file to easily restore ACLs back to their original settings

System Requirements

A PC running MS Windows Server 2008, 2012, 2016, or Windows 7, 8, or 10.

Connecting to a Windows 2008, 2012, or 2016 Active Directory network.

120 MB of disk storage for the software.