What tool are you looking for ?

Hello everyone,

If you found this site searching for Active Directory tools, please let me know what kind of tool you were looking for. I need some ideas on what tools end users are interested in.  If you could email me at kamran dot safavi at gmail dot com or leave a comment below, it would be greatly appreciated.



Free AD Permissions Reporting Tool

ADACLScannerYou have just started a new job and learn that the administrator that used to setup permissions has recently left the company. The names of groups are not very informative, and there is no documentation. How can you determine if access rights have been setup correctly ?

|Read the Rest of the Entry…

Top 5 Reasons for Third Party Active Directory Tools


1. Security

Many threats to IT environments are being created each day by those with malicious intent. While many threats are external, the most insidious threat may come from the internal user that has unchecked IT privileges and access to essential data. The Verizon 2010 Data Breach Investigations Report stated that 48% of data breaches are done by insiders. The actions by 90% of those insiders are done on purpose with malicious intent in mind.
|Read the Rest of the Entry…

Free Active Directory Reporting Tool


AD Info is a free reporting tool currently in Beta. I was able to download the installer, install it, and run my first report within 1 minute:) It has a nice, easy to use user interface, and many reports including User, Computer, Group, Group Policy, Contacts. It automatically detected the domain and used the credentials I was logged in as by default to run the reports. While domain and credential configuration options are available, I was glad I didn’t have to configure anything to run my first report.
|Read the Rest of the Entry…

Active Directory Reading List

The Directory Services Team has put together a comprehensive list of articles covering Active Directory’s core technology as well as advanced topics which they have appropriately titled: Post-Graduate AD Studies.

Web-based User Provisioning with ADAXES


I’m a fan of Softerra’s LDAP Administrator, which I have reviewed here, and finally got around to checking out their new web-based AD management application. Web-based AD managers leverage Active Directory to make it useful for all users in an organization. As a result, they are priced higher than desktop applications that are only used by IT Admins.
|Read the Rest of the Entry…

Does Quest OnDemand point to a new breed of AD tools in the cloud?

OnDemand_Main Quest’s OnDemand Recovery Manager is the first Active Directory management tool built on Microsoft’s new Azure cloud platform. In this post, I review this interesting tool, and take a look at a technology that greatly simplifies integrating on-premise applications with the cloud, and which may lead to a new breed of Active Directory tools. 
|Read the Rest of the Entry…

A new tool in Windows Server 2008 that simplifies restoring Active Directory

Windows 2003 introduced the feature of snapshots for backing up critical information from the Active Directory Domain Services using VSS (Volume Shadow Copy Services). The problem was that if the DC needed to be restored from snapshots multiple copies would have to be restored and compared to find the best copy. And DC restoration requires a reboot into Directory Restore Mode which could slow down or take down a domain until the Active Directory files were recovered. With Windows 2008 Server a new tool Dsamain.exe and a improved Ntdsutil .exe make the operation simpler and without requiring reboot.
|Read the Rest of the Entry…

EmpowerID adds features from Quest ActiveRoles Server

The EmpowerID product started out as a web-empoweridmain based self-service portal designed to reduce help-desk calls. It allowed users to update their own user information, like their phone number in Active Directory, to reset their own passwords, and also provided a customizable company phonebook. The Dot Net Factory, which makes EmpowerID, has since incorporated many features from Quest’s ActiveRoles Server and it has grown into a full-featured identity management solution.
|Read the Rest of the Entry…

Unimpressed with Active Directory Export


I was looking for an easy to use utility to export data from one test Active Directory domain to another test AD lab and came across Active Directory Export. It has an intuitive interface that lets you select OUs,Groups,Users to import or export.

|Read the Rest of the Entry…