Active Directory

Summary

Production Status: Production
Description: Inspects Active Directory, returning a wide variety of data including actionable summary information such as privileged users, security policies, and much more.
Documentation
Inspector Category: Apps & Services
Discovers: Windows Server

Data Views Information

Overview Data Table

Domain Name
Domain Mode
Domain Controllers
Sites / Subnets
Recycle Bin Enabled
Recycle Bin Scope
Total Users
Total Privileged Users
Privileged Users
Total Stale Users
User Summary
Total Groups
Group - Administrators
Group - Domain Admins
Group - Enterprise Admins
Total Computers
Total Stale Computer Accounts
Total Computer Types
Servers
Organizational Units
Minimum Password Length
Password Complexity Requirement
Enforce Password History
Max Password Age (days)
Min Password Age (days)
Account Lockout Threshold
Account Lockout Duration (hours)
Account Lockout Observation Window (hours)
Store Passwords With Reversible Encryption
Details about Group Changes In Last 24 Hours: Object Name, Object Type, Group Name, Privileged, Modify Time

Data Tab Headers

Overview
Users
Groups
Computers
Group Policies
Domain
Domain Controllers
Forest
RootDSE
Organizational Units
DHCP
DNS

Actionable Alerts

Active Directory | Locked Out Users
Active Directory | User with Stale Password
Active Directory | Privileged User with Stale Password
Active Directory | No Password Expiration Policy
Active Directory | Stale User Accounts
Active Directory | Never Used User Accounts
Active Directory | User Accounts With Incorrect Passwords
Active Directory | User Accounts With Brute Force Attempts
Active Directory | Default Guest Account Enabled
Active Directory | Stale Computer Accounts
Active Directory | Computers With Anomalous Login Activity
Active Directory | Domain Mode at or near End of Support
Active Directory | Forest Mode at or near End of Support
Active Directory | Servers at or near End of Support
Active Directory | Workstations at or near End of Support
Active Directory | Default Domain Policy - Minimum Password Length Too Short
Active Directory | Default Domain Policy - Password Complexity Not Activated
Active Directory | Default Domain Policy - Account Lockout Threshold Not Set
Active Directory | Lack of Redundancy With Domain Services
Active Directory | Change to Active Users
Active Directory | Change to Privileged Users
Active Directory | Recycle Bin Not Enabled
Active Directory | Detached Grouped Policy
Active Directory | GPO Last Modification Timestamp Changed
Active Directory | Protected Group Members Modified
Active Directory | AD Recycle Bin Toggled
Active Directory | AD Recycle Bin Scopes Modified
Active Directory | Domain Mode Modified
Active Directory | Forest Mode Modified
Active Directory | FSMO Role Holders Modified
Active Directory | Forest Sites Modified
Active Directory | Global Catalog Servers Modified
Active Directory | Key Password Policy Details Modified
Active Directory | Domain Controllers + Key Details Modified
Active Directory | Count of Joined Computers Changed

Metrics

Active Directory: Count of Joined Computers
Active Directory: Privileged Users Count
Active Directory: Workstation Count
Active Directory: Server Count
Active Directory: Never Used Users Count (Activity)
Active Directory: In Use Users Count (Activity)
Active Directory: Stale Users Count (Activity)
Active Directory: Disabled Users Count (Status)
Active Directory: Expired Users Count (Status)
Active Directory: Active Users Count (Status)
Active Directory: Locked Out Users Count (Status)
Active Directory: Stale Computer Count
Active Directory: Users Count
Active Directory: Windows 7 OS Computers List
Active Directory: Windows 7 OS Computers Count
Active Directory: Windows XP OS Computers List
Active Directory: Windows XP OS Computers Count
Active Directory: SystemInfo
Active Directory: Groups
Active Directory: Computers List
Active Directory: Active Users List
Active Directory: Privileged Users List
Active Directory: GPO Last Modification Summary
Active Directory: Protected Group Members Summary
Active Directory: AD Recycle Bin Enabled
Active Directory: AD Recycle Bin Scope List
Active Directory: Domain Mode
Active Directory: Forest Mode Numerical
Active Directory: FSMO Role Holders List
Active Directory: Forest Site List
Active Directory: Global Catalog Server List
Active Directory: Password Policy Summary
Active Directory: Domain Controllers Summary
Active Directory: Active Users Email List
Active Directory: Locked Out Users List
Active Directory: Locked Out Users Count
Active Directory: Non-Privileged Users with Stale Password List
Active Directory: Age of Oldest Non-Privileged User Password
Active Directory: Privileged Users with Stale Password List
Active Directory: Age of Oldest Privileged User Password
Active Directory: Maximum Password Age
Active Directory: Stale User Accounts Summary
Active Directory: Stale User Accounts Count
Active Directory: Never Used User Accounts Summary
Active Directory: Never Used User Accounts Count
Active Directory: User Accounts With Incorrect Password Attempts Summary
Active Directory: User Accounts With Incorrect Password Attempts Count
Active Directory: User Accounts With Brute Force Attempts List
Active Directory: User Accounts With Brute Force Attempts Count
Active Directory: Default Guest Account Enabled
Active Directory: Default Guest Account Enabled Count
Active Directory: Stale Computer Accounts List
Active Directory: Stale Computer Accounts Count
Active Directory: Computers With Anomalous Login Activity List
Active Directory: Computers With Anomalous Login Activity Count
Active Directory: Domain Mode Numerical
Active Directory: Forest Mode
Active Directory: Servers at or near End of OS Support Summary
Active Directory: Servers at or near End of OS Support Count
Active Directory: Workstations at or near End of OS Support Summary
Active Directory: Workstations at or near End of OS Support Count
Active Directory: Account Minimum Password Length
Active Directory: Account Password Complexity
Active Directory: Account Lockout Threshold
Active Directory: Account Lockout Observation Window
Active Directory: Account Lockout Duration
Active Directory: Domain Controllers Count
Active Directory: Detached Grouped Policy List
Active Directory: Detached Grouped Policy Count
Active Directory: Group List
Active Directory: End of Life Workstations (Excludes Roar Group)
Active Directory: List of Active Users with Brute Force Attempts
Active Directory: Enforce Password History
Active Directory: Minimum Password Age
Active Directory: DHCP % In Use Over 80 List
Active Directory: User Password & Activity Summary [Power BI]
Active Directory: Account Policy [Power BI]
Active Directory: Computers Details [PowerBI]
Active Directory: User Search List [Power BI]