One of the key reports that IT security managers seek often is Nested Group Membership report. With ADManager Plus, you can have this report generated automatically (at the time specified by you) and delivered to your inbox.
Extracting a complete group membership report using LDAP query or scripting technique is not so easy; one cannot go about querying an object's "member of" attribute to get the names of every associated group. An Active Directory object, such as a user or group (for which group membership is queried), might very well have transitive membership with several groups by inheritance. For example, a user might gain indirect membership with group B while becoming a member of group A, just because A is already a member of B.
That was only a simple example with 2 levels of group memberships. However, when the levels of a group membership go up a few notches, then trailing an object's indirect group memberships becomes extremely tough - even for advanced scripters. Take a look at the following diagram which illustrates this point:
Our "Nested Group Membership" reports tabulates all the groups that a user is member of - whether directly or indirectly - at the click of a button. All you have to do is provide the user name and extract the report.
An important advantage of this report is that you get to view a detailed summary of "members" and "member of" attributes of all the nested groups associated with a given user from one single screen.
Here's where you set up a report generation schedule and provide addresses that this report should be emailed to.
Featured reports
Make your everyday Active Directory management tasks easy and light with ADManager Plus's AD Management features. Create, modify and delete users in a few clicks!
A catalog of almost every report that you will need from your Active Directory! Comprehensive and Reliable reporting. Schedule reports to run periodically. Manage your AD right from within the reports.
Unload some of your workload without losing your hold. Secure & non-invasive helpdesk delegation and management from ADManager Plus! Delegate powers for technician on specific tasks in specific OUs.
Create and manage Exchange mailboxes and configure mailbox rights using ADManager Plus's Exchange Management system. Now with support for Microsoft Exchange 2010!!
Get rid of the inactive, obsolete and unwanted objects in your Active Directory to make it more secure and efficient...assisted by ADManager Plus's AD Cleanup capabilities.
A complete automation of AD critical tasks such as user provisioning, inactive-user clean up etc. Also lets you sequence and execute follow-up tasks and blends with workflow to offer a brilliant controlled-automation.
Need Features? Tell Us
If you want to see additional features implemented in ADManager Plus, we would love to hear. Click here to continue
400-660-8680
