Enterprise Reporter for Active Directory Active Directory and Azure Active Directory discovery and reporting across the enterprise

Microsoft Active Directory (AD) At any time, administrators need to BENEFITS: administrators today have a broad range be able to answer questions like • Delivers automated discovery and of responsibilities, including supporting the following: reporting on the configuration of directory migrations, achieving and Active Directory and Azure AD maintaining IT compliance, investigating • Who can do what in my Active Directory security incidents, and maintaining and Azure Active Directory? • Enhances security and compliance proper separation of duties (SoD) — by increasing visibility into Active • What users, groups and roles exist in my Directory and Azure AD all with limited staff and budget. As on-premises and cloud environments? organizations move to cloud and hybrid • Provides pre-migration analysis infrastructures, the job becomes even • Which user accounts can be safely to facilitate a smooth domain more challenging, since their Active deleted before migrating to a migration or consolidation project new domain? Directory footprint expands as they have • Facilitates AD historical analysis to also manage and secure Azure AD. • How has group membership changed and compliance reporting over time for AD domain local and by capturing the historical global groups? configuration of Active Directory and providing detailed change history reports

• Is scalable, secure and customizable to support large and complex Microsoft Windows environments with multiple groups of report consumers

Figure 1: Enterprise Reporter for Active Directory reports on users, groups, group memberships, permissions and other critical objects residing in domains, forests and tenants. Enterprise Reporter for Active Directory • Pre-migration assessment — Plan SYSTEM REQUIREMENTS provides deep visibility into AD users, for a smooth domain migration or groups, roles, organizational units (OUs) consolidation project by pinpointing For a complete list of system and permissions — as well as Azure AD user and group dependencies, matching requirements, see the conflicts, and unused accounts before users, groups, roles and application Release Notes. the migration starts. service principals. Armed with this BUILT-IN REPORTS information, organizations can perform • Delegated rights reporting — Ensure BY CATEGORY security assessments, configuration appropriate AD and Azure AD change history reviews, and pre- and delegation by reporting on who has Health Check: post-migration analyses, thereby access to AD domains and OUs, users, enabling more informed strategic groups and computers, as well as Azure Active Directory Summary planning and proactive management of AD users, groups, roles, applications and permissions. Disabled Accounts the entire IT infrastructure. Locked out Accounts • AD change history — Capture historical FEATURES configuration information on AD users, Information for Users, Groups, • Security and compliance visibility — groups, OUs and permissions, and view Domains and more Gain visibility into the configuration of detailed change history reports. Gain in- critical IT assets in both AD domains depth insight for historical analysis and Azure Active Directory: and Azure AD tenants. Comprehensive compliance reporting. reports provide the insight necessary Azure Tenant Information • Scalable data collection — Scale to AD to ensure security and compliance with environments of any size and geographic Application Service Principals internal policies and external regulations. distribution. Schedule collections during Identities Membership • Improved insights with IT Security off-peak hours to minimize the impact and Roles Search — Correlate disparate IT data of data collection on network and server performance, and leverage the Azure Users, Roles, Groups, from numerous systems and devices distributed collection architecture for and Members into an interactive search engine for fast security incident response and forensic load balancing. Users Connected with analysis. Include user entitlements and • Efficient storage — Reduce database On-Premises AD activity, event trends, suspicious patterns storage requirements and save more and more with rich visualizations and change history data by comparing AD Migration Assessment: event timelines. domain discoveries and storing only Duplicate Domain (Computers, the changes. Groups, Users) Matching (Computers, Groups, Users)

Passwords: Changed/Expired/Older Passwords Last Password Changed

Other: Active Directory Permissions Information for Users, Groups, Domains and more Domain Information (accounts, computer, controller, groups and members) Domain Users without Recent Logons Group Membership Comparison

Figure 2: Enterprise Reporter for Active Directory can detect stale AD user accounts that have not recently logged on. • Automated reporting workflows — ABOUT QUEST Ensure stakeholders get the reports 50 percent of they need, when they need them, with Quest helps our customers reduce automated report generation and flexible tedious administration tasks so they surveyed IT scheduling of report delivery. can focus on the innovation necessary for their businesses to grow. Quest® organizations • SoD — Honor departmental and solutions are scalable, affordable business function boundaries by and simple to use, and they deliver purchased Enterprise enabling auditors, help desk staff, IT unmatched efficiency and productivity. Reporter to solve managers and other stakeholders to get exactly the reports they need and Combined with Quest’s invitation to Active Directory nothing more. the global community to be a part of its innovation, as well as our firm pre-migration • Customizable reports — Perform commitment to ensuring customer effective data analysis that meets the satisfaction, Quest will continue to planning and post unique informational needs of your accelerate the delivery of the most organization using predefined reports comprehensive solutions for Azure cloud migration analysis. or creating new reports. Customize with advanced filtering and export multiple management, SaaS, security, workforce mobility and data-driven insight. Source: TechValidate. TVID: 612- formats, including PDF, HTML, MHT, RTF, 057-336 XLS, XLSX, CSV, text and images. • Common reporting portal — Export reports to our software knowledge portal for a unified reporting interface across the entire family of Quest security and compliance solutions.

Quest Quest and the Quest logo are trademarks and registered trademarks of Quest Software 4 Polaris Way, Aliso Viejo, CA 92656 | www.quest.com Inc. For a complete list of Quest marks, visit www.quest.com/legal/trademark-information. If you are located outside North America, you can find aspx. All other trademarks are property of their respective owners. local office information on our Web site. © 2017 Quest Software Inc. ALL RIGHTS RESERVED. DataSheet-EnterpriseReporter4AD-US-KS-29302