February 15, 2013

How to view Active Directory ACLs and Permissions

Active Directory stores and protects vital content such as user accounts, security groups, computer accounts, and service connections points. Content in the Active Directory is typically stored in OUs and containers and all content is protected by Active Directory ACLs.

Each Active Directory ACL contains one or more ACEs, each of which grants or denies some Active Directory security permission for a user, an Active Directory security group or for a well-known SID such as Everyone, Authenticated Users etc.

Active Directory ACL

IT admins often need to be able to view Active Directory ACLs as well as export/dump Active Directory permissions so as to be able to analyze Active Directory security from time to time.

IT admins usually utilize tools like dsacls, dsrevoke, acldiag etc to try and view AD ACLs but these tools seldom provide the granularity that is needed to view and analyze AD ACLs completely.

The Worlds Best Active Directory Audit Tool

The Gold Finger Active Directory Audit Tool from Paramount Defenses is the world's best Active Directory security analysis tool. One of its capabilities includes an Active Directory ACL viewer -


Active Directory Audit Tool
 
Gold Finger's ACL Viewer is the world's most capable ACL viewer because in addition to displaying the complete ACL, it can break down the permissions and the flags fields of an ACL into individual columns. This allows administrators to be able to easily sort Active Directory ACLs by permission type and thus be able to instantly audit Active Directory rights identify all ACEs that grant a specific type of permission, whether directly, or as a combination of permissions.

In addition to an ACL viewer, Gold Finger also features other Active Directory security analysis and Active Directory Audit capabilities such as the ability to determine Active Directory effective permissions, and generate fully automated effective Active Directory delegated access reports.

When it comes to Active Directory Audit Tools, Gold Finger is most simply the world's most powerful and capable Active Directory audit tool. No other tool in the world comes even close.

For more information, and to download a free trial, please visit -
http://www.paramountdefenses.com/goldfinger.