Free User Creation App

imageI came across this free user creation app that had been downloaded over 59,000 times and was interested to find out why it was so popular. It only provides basic functionality, but it does have one time saving feature that built in tools lack.

The main benefit this tool offers over the built in options, such Active Directory Users and Computers(ADUC), or

|Read the Rest of the Entry…

Will Dynamic Access Control replace NTFS permissions ?

DACMicrosoft’s Windows Server 2012 includes a new feature called Dynamic Access Control that simplifies authorization and authentication using claims-based access control. IT professionals are finding the ever increasing number of groups in Microsoft Active Directory more difficult to manage. The burgeoning amount of personal devices and cloud services has made this even more challenging. Many IT professionals are faced with the dilemma of ensuring employees have access to information they need from various locations while securing sensitive information.

|Read the Rest of the Entry…

Free AD Permissions Reporting Tool

ADACLScannerYou have just started a new job and learn that the administrator that used to setup permissions has recently left the company. The names of groups are not very informative, and there is no documentation. How can you determine if access rights have been setup correctly ?

|Read the Rest of the Entry…

What tool are you looking for ?

Hello everyone,

If you found this site searching for Active Directory tools, please let me know what kind of tool you were looking for. I need some ideas on what tools end users are interested in.  If you could email me at kamran dot safavi at gmail dot com or leave a comment below, it would be greatly appreciated.



Top 5 Reasons for Third Party Active Directory Tools


1. Security

Many threats to IT environments are being created each day by those with malicious intent. While many threats are external, the most insidious threat may come from the internal user that has unchecked IT privileges and access to essential data. The Verizon 2010 Data Breach Investigations Report stated that 48% of data breaches are done by insiders. The actions by 90% of those insiders are done on purpose with malicious intent in mind.
|Read the Rest of the Entry…

Free Active Directory Reporting Tool


AD Info is a free reporting tool currently in Beta. I was able to download the installer, install it, and run my first report within 1 minute:) It has a nice, easy to use user interface, and many reports including User, Computer, Group, Group Policy, Contacts. It automatically detected the domain and used the credentials I was logged in as by default to run the reports. While domain and credential configuration options are available, I was glad I didn’t have to configure anything to run my first report.
|Read the Rest of the Entry…

Active Directory Reading List

The Directory Services Team has put together a comprehensive list of articles covering Active Directory’s core technology as well as advanced topics which they have appropriately titled: Post-Graduate AD Studies.

Web-based User Provisioning with ADAXES


I’m a fan of Softerra’s LDAP Administrator, which I have reviewed here, and finally got around to checking out their new web-based AD management application. Web-based AD managers leverage Active Directory to make it useful for all users in an organization. As a result, they are priced higher than desktop applications that are only used by IT Admins.
|Read the Rest of the Entry…

Does Quest OnDemand point to a new breed of AD tools in the cloud?

OnDemand_Main Quest’s OnDemand Recovery Manager is the first Active Directory management tool built on Microsoft’s new Azure cloud platform. In this post, I review this interesting tool, and take a look at a technology that greatly simplifies integrating on-premise applications with the cloud, and which may lead to a new breed of Active Directory tools. 
|Read the Rest of the Entry…

A new tool in Windows Server 2008 that simplifies restoring Active Directory

Windows 2003 introduced the feature of snapshots for backing up critical information from the Active Directory Domain Services using VSS (Volume Shadow Copy Services). The problem was that if the DC needed to be restored from snapshots multiple copies would have to be restored and compared to find the best copy. And DC restoration requires a reboot into Directory Restore Mode which could slow down or take down a domain until the Active Directory files were recovered. With Windows 2008 Server a new tool Dsamain.exe and a improved Ntdsutil .exe make the operation simpler and without requiring reboot.
|Read the Rest of the Entry…