Windows Active Directory explorer and search

ADManager Plus' AD Explorer makes it possible to view all the containers and accounts of any domain in your Active Directory, similar to the native Active Directory Users and Computers (ADUC) console, right inside its web-based console. Unlike ADUC, when you click any object in the tree, this Active Directory management tool makes it possible to view, in a single screen, the complete list of:

• All the properties of the object.
• All the permissions (Access Control Entries) on this object.

For example, when you click a user account in AD Explorer's tree view of your domain, you can view:

1. All the properties of the user account, including:

• Account details like Display Name, Logon Name, Member Of, Account Status, and Object GUID.
• Contact details like Address information, Organization information, and Telephone Number.
• Profile information like Profile Path and Script Path.
• Exchange-Server-specific information like Display Name, Delivery Restrictions, and Storage Limit.
• Object-specific information like object created date and time and object modified date and time.

2. All the permissions on the user account

The Security link lists objects that have permissions on this user account in the form of its Access Control Entries (ACEs). For each ACE, you can view the:

• Security Principal that has permissions on this user.
• Type of access control: Allow or Deny.
• Permissions assigned to the security principal (Full Control, Read Permissions, Read Remote Access Information, Modify Owner, etc.).
• Level or Scope of the specified permissions (this object only, this object and all child objects, etc.).

3. User entitlements

The Entitlement option allows you to view the NTFS permissions and group membership of a user. Under NTFS Permissions, you can view the list of folder permissions pertaining to the selected user in Active Directory. The Group Membership tab displays the groups in which the selected user is a part of.

4. Modification history

Find the details of attribute changes made to an object in Active Directory using ADManager Plus. In addition to this, you can also monitor the actions performed by reviewers, requestors, approvers, and executors according to the date and time.

Active Directory Search

The search option in ADManager Plus, an identity governance and administration (IGA) solution, helps in locating any object present in your Active Directory. Based on the object or account to be located and the search scope, you can use either of the following searches:

• Employee Search
• AD Objects Search

Employee Search

This search option allows you locate any user or employee present in your Active Directory domain using their Name, sAMAccount Name, E-mail Address, Telephone Number, or Location. The highlights of the Employee Search include:

• It is a web-based search.
• You don't have to log on to ADManager Plus to use this search.
• You can restrict the employee information that should be displayed in the search results. For example, you can configure this search to show only the Full Name, E-mail Address, Title, and Department of the matching users in the search result.

Use the free download of this Active Directory tool's trial version to experience the absolute ease with which its search options help you locate any employee in your organization.

AD Objects Search

This is a multi-domain, multiple object search. That is, this search option can be used to locate any user, computer, or group object present in any of your Active Directory domains. Advantages of the AD Objects Search include:

• A web-based, multi-domain, and multiple object search.
• The search scope can be restricted to specific OUs or domains.
• If needed, you can restrict the search scope to specific types of objects, like users, groups, and computers; users and groups; or users and computers.
• Multiple Objects Search: You can locate any user, computer, or group using this search option.
• You can fetch the list of only the users or computers or groups from multiple or all the domains of your Active Directory.
• You can also use the Object GUID to search for the required Active Directory objects.

While this tool makes locating any Active Directory object a simple and quick task, it also makes Active Directory management far simpler. This tool offers more than 150 prebuilt Active Directory reports that fetch information from every nook and corner of your Active Directory; you can even perform management actions (unlock user accounts, reset passwords, etc.) right from these reports. You can accomplish all this in just a few mouse clicks!

Featured links

Need Features? Tell Us
If you want to see additional features implemented in ADManager Plus, we would love to hear. Click here to continue