ADManager Plus—a privileged access management tool

Privileged access management (PAM) helps in maintaining the security of your network. After all, most security threats in an Active Directory (AD) environment lead back to unauthorized access. PAM allows you to set up a secure environment where only trusted users can access certain files, folders, and groups.

These privileged users, who have elevated access to important resources in your network, can perform administrative actions depending on what rights they've been given. You can always revoke the permissions when needed.

PAM, the ADManager Plus way

ADManager Plus helps with PAM through its various reports and functionalities.

Manage and monitor group

Manage AD groups efficiently using ADManager Plus. You can:

• Create, modify, move, or delete multiple groups at once.
• Provide special privileges to a group of users in a single click.
• Add users to groups based on requests raised using ADManager Plus' workflow abilities.
• Remove members from groups automatically after a certain amount of time.

Report on various aspects of your groups, including security and distribution groups. These reports provide details on the scope of groups, which groups have members and which don't, nested members, and more. Identify stray users who have gained access to groups by way of inheritance and revoke their membership from within the reports.

Manage and report on permissions

Discover who has access to resources in your environment, and at what level. Assign and modify NTFS and share permissions in bulk using ADManager Plus. Elevate permissions for a user account and revoke them automatically when the user no longer requires those access rights.

ADManager Plus also allows you to monitor folder permissions by reporting on:

• The permissions users and groups have over shares and folders in your AD environment.
• Shares and their permissions in specified servers.
• Folders protected from inheriting permissions.

Audit delegates' permissions

Audit the management and administrative actions performed by users using ADManager Plus' built-in, GUI-based reports. Create accounts for help desk technicians quickly by assigning the desired roles to a group as a whole and allow users to raise requests to add technicians to groups using the workflow structure of ADManager Plus.

See all the actions performed by these help desk technicians, including what action was performed on which object and the time the action was performed. You can also filter the results based on the time the actions were performed.

View all the permissions assigned to or revoked from help desk technicians. Establish an audit trail to identify administrators performing changes on help desk technicians and see which roles were modified.

Protect important files and groups containing business-critical information and prevent accidental or intentional misuse of privileged resources by being vigilant about users' access rights. Elevate the access rights of only trusted users and check on them regularly using ADManager Plus.

ADManager Plus is a web-based solution for all your AD, Exchange, Skype for Business, Google Workspace, and Office 365 management needs. It simplifies several routine tasks such as provisioning users, cleaning up dormant accounts, managing NTFS and share permissions, and more. ADManager Plus also offers more than 150 pre-packaged reports, including reports on inactive or locked-out AD user accounts, Office 365 licenses, and users' last logon times. Perform management actions right from reports. Build a custom workflow structure that will assist you in ticketing and compliance, automate routine AD tasks such as user provisioning and de-provisioning, and more. Download a free trial today to explore all these features.

Featured links

Need Features? Tell Us
If you want to see additional features implemented in ADManager Plus, we would love to hear. Click here to continue