AD Permissions Reporting Tool

January 13, 2014 — 4 Comments

The first version of my Active Directory permissions reporting tool has now been officially released. There are still plenty of features I will be adding in future updates but even this first version is easier to use and more powerful than other tools out there – but then I would say that wouldn’t I Smile

This is a tool for reporting on security rights and delegated permissions that have been assigned to OUs and other objects in your Active Directory domain – if you’re looking for a tool that reports on file system permissions instead then check out my NTFS Permissions Reporter tool.

A picture paints a thousand words so to give you an idea of how the tool works here’s the main window of AD Permissions Reporter, showing permissions and members of groups used in those permissions:

MainWindow

You can use it to document permissions on every object in the domain, or you can narrow the report down to a specific tree of OUs (or a specific object) and with the powerful filtering system you can find very specific permission configurations – as you can see in the screenshots below.

SimpleFilter

AdvancedFilter

As always I’ve tried to make this as easy to use as possible (which was difficult as AD permissions are a lot more complex than NTFS permissions) but I’ll be uploading some videos soon that provide step by step guides on how to perform certain tasks and go into more detail on each of the features of the program. For now though there is this general tour of the program:

AD Permissions Reporter Overview

 

If you think this tool might help you out then you can download the free edition or find out more about the standard edition (and view more screenshots) here: http://www.cjwdev.co.uk/Software/ADPermissionsReporter/Info.html

Oh and a big thank you to everyone that helped with the BETA testing Smile

Chris

4 responses to AD Permissions Reporting Tool

  1. 

    Just downloaded it and tried it out. Awesome! Fast response, quick download of thousands of permissions. Now I just need to figure out the filtering in the GUI and I’ll be all set.

    This is faster than me writing powershell :)

    • 

      Thanks :) I’m glad to hear that. If you have any questions regarding the filtering feature then feel free to send me an email (cwright@cjwdev.co.uk) and I’ll be happy to explain in detail

  2. 

    I have a user de-provisioning script that I want to use with AD Permissions Reporter. Prior to disabling a user account, I want to report on permissions of each user and email to our security group. After the account is disabled, I want another report to verify no access is available. How would I use configure a command line filter for this?

    Thank you!

  3. 

    Just downloaded it and tested it out. it runs quick, but I was looking for a way to allow an intern to document the permissions on all of our shares, but there are a lot of shares the intern wouldn’t have access to read.

    Any ideas?

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s