In today's post, I will show you just how easy it is to view, analyze and export Active Directory security permissions / access rights/ ACLs with the world's best Active Directory ACL Viewer and ACL Exporter. IT admins often have a need to be able to view Active Directory permissions / ACLs and analyze them to find out who has what rights on an Active Directory object, or to find out who is delegated what rights on an Active Directory object.
 |
| Active Directory Security Permissions |
How to View Active Directory Permissions Easily
The ACL Viewer capability of the Gold Finger Active Directory Audit Tool lets you instantly view, analyze and export the permissions granted on any Active Directory object at the touch of a button.
 |
How to View Active Directory Permissions Easily |
Here's how easy it is to view the security permissions in the ACL of an Active Directory object -
- Launch Gold Finger
- Select the ACL Viewer Capability
- Select the report - View the ACL of an Active Directory object
- Specify the DN of the Active Directory object in the scope field
- Press the Gold Finger button.
That's it.
Gold Finger instantly retrieves and displays the complete ACL of the Active Directory object, including all the fields listed below.
Active Directory Permissions Fields Displayed -
- Type - Allow / Deny
- Security Principal
- Permissions
- Attribute/Class
- Inheritance
- Applies To
Detailed Security Permissions Analysis View
Gold Finger is the also the world's only ACL Viewer that displays each of the thirteen unique Active Directory permissions in their own individual columns, thus letting you easily sort the entire ACL of the Active Directory object by permission-type and thus find all ACEs that grant a specific kind of permission, such as Create-Child, or Extended-Right etc.
 |
| Active Directory Permissions Displayed in Individual Columns |
List of Active Directory Security Permissions Displayed in Individual Columns
In fact, here is the list of the 13 different types of Active Directory Security permissions, that Gold Finger displays in individual columns for instant, reliable and effortless analysis -
- List Child (LC) permissions
- List Object(LO) permissions
- Read Control(RC) permissions
- Read Property (RP) permissions
- Write Property (WP) permissions
- Create Child(CC) permissions
- Delete Child(DC) permissions
- Standard Delete (SD) permissions
- Delete Tree (DT) permissions
- Write DACL (WD) permissions
- Write Owner (WO) permissions
- Extended Rights (CR) permissions
- Validated Write (SW) permissions
Gold Finger can be used to view Active Directory permissions easily and in fact can be used to view the ACL of any object in any Active Directory domain partition, as well as objects in the Schema partition and the Configuration partitions.
For instance, Gold Finger can be used to view the ACL of the root of the Configuration partition, or any Class-Schema or Attribute-Schema object in the Schema partition or any object in any domain partition, such as the System container, the AdminSDHolder object, the Users container, or any OU, user account, computer account, security group, service connection point etc. of your choice.
This information can be used to assess delegated rights in Active Directory, verify provisioned access in Active Directory, as well as help when you are trying to audit delegated access in Active Directory.
In this manner, Gold Finger can help you perform detailed Active Directory Security Analysis, and as well as easily sort and export the ACL of any Active Directory object in your environment.
For more information, and to download a free 21-day trial, please visit - http://www.paramountdefenses.com/goldfinger_capabilities_acl_viewer_and_exporter_for_active_directory.html
