active directory reporting tool

Hi ALL,

       Anyone could help me in finding reporting tools for Active directory

Thanks

September 30th, 2011 6:17am

Hi,

There are various 3rdparty tools available.. check out Quest( popular one)..  I found this one from microsoft but never tried it. http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=17717 

I heard there is a program called RAP  which will help you to monitor,assess risks and everything, for this you need to contact MS.

Free Windows Admin Tool Kit Click here and download it now
September 30th, 2011 6:28am

Hello,

You can use eventcombmt, there are so many in built search is present, like FRS/Sysvol/AD/DNS.

That is the part of account lockout tool.

Try it, you can monitor AD/DNS/Sysvol health

http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=18465

If you want to export all users attributes

Dsquery * -limit 0 -filter "&(objectClass=User)(objectCategory=Person)" -attr * >>output123.txt

September 30th, 2011 6:48am

Can you give us some more information on what you are trying to report on?  

If you are trying to check the health of your dcs then dcdiag, repadmin, and event logs are a good place to start.  Depending on your version of Windows there are also tools to troubleshoot FRS or DFSR issues.

If you are trying to report on users/computers/counts.  There are tools like powershell, ADUC, csvde, adfind (free third party), adinfo (free third party) and the dstools.

If you are trying to get a drawing of your AD you can download the free AD toplogy diagrammer. http://www.microsoft.com/download/en/details.aspx?id=13380

ADRAP is usually done by a PFE, you can run the adrap scoping tool before an engagement if you have a contract with Microsoft   http://www.shariqsheikh.com/blog/index.php/200907/adrap-scoping-tool/

 

Thanks

 

Mike

Free Windows Admin Tool Kit Click here and download it now
September 30th, 2011 6:50am

Hi,

a very good ad documentation tool is josé.

You find the download here: http://www.faq-o-matic.net/2011/07/06/jos-version-3-1/

The only problem for you is that the tool is in german but I think you should take a look and perhaps you can still use it.

Perhaps bing translation can help you. 

 

September 30th, 2011 7:48am

Are you looking for real time monitoring tool or health checkup tool. Event viewer can be used to find the issues in the DC's.

DCDIAG is best tool to analyze the health of the AD, Repadmin for monitoring replication, DNSlinit for DNS etc.

What does DCDIAG actually… do?

http://blogs.technet.com/b/askds/archive/2011/03/22/what-does-dcdiag-actually-do.aspx

For GPO AGPMC(Advanced group policy management console), GPinventory etc can be used.

For FRS/DFSR, you can use FRSDIAG tool, SONAR etc.

http://msmvps.com/blogs/ad/archive/2008/06/03/active-directory-health-checks-for-domain-controllers.aspx

http://technet.microsoft.com/en-us/library/cc180912.aspx

For real time monitoring tool, you can use SCOM (System center operations manager)2007 R2, you can also have audit collection service with SCOM. 

http://www.microsoft.com/download/en/details.aspx?id=21357 

There are other 3rd party tools like Netwrix, Quest, Admanager plus etc.


Regards  

Free Windows Admin Tool Kit Click here and download it now
September 30th, 2011 8:54am

Hi,

What are the activities you are looking to monitor. If you want Domain Controller Health Monitoring tool then you can check SCOM which will give you realtime monitoring

If you are looking for the change reporting tools to monitoring what is getting changed in AD then you can check ARKAD and NETIQ. There are other tools like AD AUDIT Plus from Manage Engine, Quest but the tools mentioned below are very cheap compared to others. These may not provide you with very detailed report but will provide good amount of information.

ARK For AD

http://www.vyapin.com/products/active-directory-audit/active-directory-reports.htm

Net IQ Change Guardian

http://www.netiq.com/products/cgad/default.asp

September 30th, 2011 9:01am

Hello,

If you are looking for reporting on AD objects (users, groups, OUs, Exchange reports etc.) it can be accomplished through LDAP protocol. There are various handy 3-d party non-free tools (e.g. LDAP Administrator or LDAP Admin), but also there are free tools (e.g LDAP Browser is my favorite one).

http://www.ldapbrowser.com/download.htm

Regards,
Anton.

Free Windows Admin Tool Kit Click here and download it now
September 30th, 2011 10:01am

THanks for all your replies...i am looking tool to get reports(users, groups, ou's , password policies, etc) from AD

 

September 30th, 2011 6:04pm

You have plenty of choices for the users/groups/OU's in the responses above

You can use GPMC to get reports of your policies.  There are also a number of scripts with GPMC that maybe helpful for reporting    http://wmug.co.uk/blogs/1972/archive/2006/05/01/39.aspx

 

Thanks

Mike

Free Windows Admin Tool Kit Click here and download it now
September 30th, 2011 6:09pm

Hi all,

Kashif412, You can download the free AD reporting tools from the Microsoft's website. If you want to try out the best third party tool, which can manage users, groups, OU's, workgroups, password policies, etc. Download the trial version of the latest version of LADMR , which has been launched a few days ago. Some new features which have been added are:

Bulk user management, multiple computer management, multiple groups management, multiple services and jobs on bulk computers in a single go and some remote control features as well.

Thank you

Anil


October 3rd, 2011 5:07am

Hi all,

Kashif412, You can download the free AD reporting tools from the Microsoft's website. If you want to try out the best third party tool, which can manage users, groups, OU's, workgroups, password policies, etc. Download the trial version of the latest version of LADMR , which has been launched a few days ago. Some new features which have been added are:

Bulk user management, multiple computer management, multiple groups management, multiple services and jobs on bulk computers in a single go and some remote control features as well.

Thank you

Anil


Free Windows Admin Tool Kit Click here and download it now
October 3rd, 2011 8:07am

Hi,

I agreee with above mentioned tools, however I would like to add one more tool for Active Directory Replication Status Tool.

http://www.microsoft.com/en-us/download/details.aspx?id=30005

Hope this helps..

June 20th, 2012 3:41am

Hello,

I translated Jos Active Directory Documentation 3.1 into English language. You can download from here (Jos created by Nils Kaczenski (ADDS - MVP) and He has himself written Free sharing allowed):

Jos Active Directory Documentation 3.1 - Free Tool (en-US)

Regards

Free Windows Admin Tool Kit Click here and download it now
October 11th, 2012 9:41pm

Thanks Biswajith,

You saved my day, I never thought it would been so simple.

Besides I know bit of a excel work too... so it wasn't difficult to sort out the report.

Thanks

Allwyn Fernande - Mumbai

November 11th, 2012 3:05pm

AD Admin & Reporting Tool by LDAPSoft may be the best one. You can securely use it to connect to any domain and install it on your local machine or on a domain server. 
Free Windows Admin Tool Kit Click here and download it now
January 22nd, 2013 7:35pm

You can use AdSysNet Active Directory Manager. This tool provides reports for users, groups, computers, contacts and ous, also it supports bulk password reset, unlock, enable/disable, join/dis-join groups, move, delete, restore, send mail and more actions for the selected records in the generated reports. You can easily filter the objects which are protected or not protected from accidental deletion.

adsysnet.com/asn-active-directory-manager-features.aspx

June 27th, 2013 1:23pm

Have a look at Adaxes - http://adaxes.com
Free Windows Admin Tool Kit Click here and download it now
June 27th, 2013 6:39pm

You can try the one we've developed at codevega.com. It's not as polished as others yet, but is very low cost and extremely good value. You can report on anything and has some features others do not, such as exporting directly into a Powershell or other script. We've also seen the command line version used for emailing daily reports of newly created Active Directory objects etc. It's called Active Directory User Reporter.


http://www.codevega.com
  • Edited by adminwiggins Thursday, November 14, 2013 11:02 AM Adding link
November 14th, 2013 11:01am

You can try the one we've developed at codevega.com. It's not as polished as others yet, but is very low cost and extremely good value. You can report on anything and has some features others do not, such as exporting directly into a Powershell or other script. We've also seen the command line version used for emailing daily reports of newly created Active Directory objects etc. It's called Active Directory User Reporter.


http://www.codevega.com
  • Edited by adminwiggins Thursday, November 14, 2013 11:02 AM Adding link
Free Windows Admin Tool Kit Click here and download it now
November 14th, 2013 2:01pm

This is the best active directory tool, we use Ad Admin & Reporting Tool for all our reporting needs. The best reports are the nested groups and nested members. Also the best part of this tool is I can see the latest nested assignment of the groups while assigning a group to a member. 

The tool also comes with a lot of built in audit reports which are very easy to generate and also you can schedule them through windows scheduler. We cannot run any tool on our domain controller due to company policy but as the tool is being used by a lot of security establishments our security department give us the permission to install it on our domain controller. 

March 17th, 2014 7:59pm

We use AD Admin & Reporting Tool by LDAPSoft and it is a great tool. The best feature of the product is nested group and user reports. 

The other feature which I like about the tool which has removed the guess work is I can see the nested assignment while assigning groups to users. One click Audit report exports is also a great feature of the product. 


  • Edited by syed101 Tuesday, March 18, 2014 9:36 PM
Free Windows Admin Tool Kit Click here and download it now
March 18th, 2014 9:35pm

We use AD Admin & Reporting Tool by LDAPSoft and it is a great tool. The best feature of the product is nested group and user reports. 

The other feature which I like about the tool which has removed the guess work is I can see the nested assignment while assigning groups to users. One click Audit report exports is also a great feature of the product. 


  • Edited by syed101 Tuesday, March 18, 2014 9:36 PM
March 19th, 2014 12:35am

Hi,

Have a look at this topic http://www.reddit.com/r/sysadmin/comments/226feh/five_apps_for_active_directory_management/

Regards,

Viktor

Free Windows Admin Tool Kit Click here and download it now
April 9th, 2014 2:28pm

There is a tool ADCore Admin that allows flexible reporting and editing.  The Show Groups option allows quickly showing group membership by all sorts of filters in a simple grid format.

http://www.permissionme.com/Products/ADCoreAdmin.aspx

December 16th, 2014 3:49pm

thank you for the dsquery
Free Windows Admin Tool Kit Click here and download it now
January 31st, 2015 10:55am

There are plenty of native Windows reporting tools for the AD. A third party tool you can try is Vyapin Software Systems' ARK for Active Directory - http://www.vyapin.com/products/active-directory-audit/active-directory-reports Another tool that allows you monitor changes in the AD is the Active Directory Change Tracker - http://www.vyapin.com/products/active-directory-change-tracking/active-directory-change-reporting
August 12th, 2015 12:26am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics