Analyzing Tools for an Active Directory

[NightcoreCEO]

Hey there Guys,

 

it's me again.

This time I need some help of you regarding a Active Directory running on Windows Server 2012 R2.

 

Do you Guys have any free Tools in mind which I can use to analyze the structure (especially the users / groups / permissions) of an Active Directory?

 

Thank you Guys,

Cheers 

[Master Disaster]

26 minutes ago, NightcoreCEO said:

Hey there Guys,

 

it's me again.

This time I need some help of you regarding a Active Directory running on Windows Server 2012 R2.

 

Do you Guys have any free Tools in mind which I can use to analyze the structure (especially the users / groups / permissions) of an Active Directory?

 

Thank you Guys,

Cheers 

You will need to be a member of either the Enterprise Admin or Domain Admin group on the server to pull details about that information from it. I'm assuming you're not otherwise you would just RDC in and pull it all direct.

[NelizMastr]

Could you be more specific?

 

What do you need to analyze? Do you need specific information that isn't available through the mmc or powershell?

Export to CSV functions are built-in.

 

[NightcoreCEO]

2 hours ago, Master Disaster said:

You will need to be a member of either the Enterprise Admin or Domain Admin group on the server to pull details about that information from it. I'm assuming you're not otherwise you would just RDC in and pull it all direct.

I am. I have administrator privilegues and access to the Domain. 

[NightcoreCEO]

7 minutes ago, NelizMastr said:

Could you be more specific?

 

What do you need to analyze? Do you need specific information that isn't available through the mmc or powershell?

Export to CSV functions are built-in.

 

well thats the thing. Our CIO told me, to search for tools / Freeware which we can use to analyze our current AD structure. Its mostly for us as a Learning thing but he also want to use the information we get to transfer them into our new, Windows Server 2016 Enviroment.

 

I havent used powershell much... so i cant tell u much about how ps will fit for our task

[fady.makram]

Bloodhound will do this all

it would give you every thing related to users and OUs and Groups even password policies

Enjoy we are using it to hack AD :)

 

[The_Ellimist]

One of the best tools is the active directory topology diagrammer for Visio. There are alot of things you can turn on and off to generate diagrams of AD. I use this alot when I want a view of a clients AD layout.

 

Using this you could generate the primary structure of AD into some diagrams to allow for high level planning for migration and working out a new structure for your 2016 environment. Something else you might want to look at if you haven't done all the planning for the new AD environment is the old Microsoft IPD Design guide series. They are a bit old but they were a series of documents you can use to plan an environment rollout and walk through the primary decisions for implementing the technology. In your case AD.

 

I've attached the copy I have of the IPD guide because the links and information still exist but it hasn't been updated for a long time so YMMV with this and I'd be paying attention to changes since they came out.

 

https://www.microsoft.com/en-au/download/details.aspx?id=13380

 

https://docs.microsoft.com/en-us/previous-versions/tn-archive/cc936627(v=technet.10)?redirectedfrom=MSDN

IPD - Active Directory Domain Services version 2.2.docx IPD - Active Directory Domain Services version 2.2.pptx

[NightcoreCEO]

15 hours ago, The_Ellimist said:

One of the best tools is the active directory topology diagrammer for Visio. There are alot of things you can turn on and off to generate diagrams of AD. I use this alot when I want a view of a clients AD layout.

 

Using this you could generate the primary structure of AD into some diagrams to allow for high level planning for migration and working out a new structure for your 2016 environment. Something else you might want to look at if you haven't done all the planning for the new AD environment is the old Microsoft IPD Design guide series. They are a bit old but they were a series of documents you can use to plan an environment rollout and walk through the primary decisions for implementing the technology. In your case AD.

 

I've attached the copy I have of the IPD guide because the links and information still exist but it hasn't been updated for a long time so YMMV with this and I'd be paying attention to changes since they came out.

 

https://www.microsoft.com/en-au/download/details.aspx?id=13380

 

https://docs.microsoft.com/en-us/previous-versions/tn-archive/cc936627(v=technet.10)?redirectedfrom=MSDN

IPD - Active Directory Domain Services version 2.2.docx 800.4 kB · 0 downloads IPD - Active Directory Domain Services version 2.2.pptx 1.52 MB · 0 downloads

okay thanks alot. I will definetly check those things out