Inventory and analyse the Microsoft directory service
Flexible Inventory Process
Microsoft Active Directory Services (ADS) is the most frequently used directory service software worldwide for computing environments. With a variety of features and configuration options, administrators can customize the computing environment.
Docusnap’s ADS module uses the LDAP protocol to create an inventory of the entire ADS. Docusnap stores the inventoried data in the integrated Configuration Management Database. All critical classes and attributes will already be inventoried automatically by a default scan. The most important objects, such as users, groups, organizational units, containers, built-in classes, contacts, shares, and computers are also included in a default scan. You can however add any other classes and attributes to be inventoried as well. This allows Docusnap to also scan third-party schema extensions. Classes and attributes are configured graphically using wizards or dialogs.
Wizards help you to set up the actual inventory process and enable you to filter the inventory scan on particular organizational units. The inventory scan can be performed immediately using the wizard or scheduled for later execution by the Docusnap Server Service.
Docusnap also scans important structural objects in ADS to provide you with a full picture of the environment. The results of an inventory scan include the following contents:
- Domain controllers
- Global Catalog servers
- Replication relationships
- Group policies
- Group memberships
- Master roles
- Trust relationships
- Users, groups, contacts, printers, computers, shares
You can also choose to inventory all permissions assigned within the ADS so that they are subsequently available when creating reports to further analyze them.
Graphical Representation of Active Directory Services
As a special highlight, Docusnap allows to visualize the retrieved data as graphical plans. Types of plans: organizational unit plan including all groups and users, location plan, group policies overview plan and domain plan including all trust relationships.
Changes that occurred between two inventory steps can be displayed, e.g. to get corresponding details for troubleshooting.
It is also possible to create a graphical display and to analyze the nesting of groups as well as membership data of users and groups. Exporting all plans to Microsoft Visio for further processing is just a few clicks away. You can easily customize the layout of all reports and plans to reflect the corporate design of your company.
The ADS feature supplies the basic data for the License Management and Permission Analysis features.
Here you find more practical examples