Scriptlogic Active Administrator FAQ

Active Administrator™ - Frequently Asked Questions

• We migrated to Active Directory and set up a load of delegated permissions,
    but we now we don't know who can do what. How do we clean it all up?
  • This is a common problem. Native AD tools have the ability to establish delegated permissions, but no simple way to identify and report on those delegations. Active Administrator makes it easy to find permissions assigned and generate reports to begin the cleanup process.
  
  
• Do I need to have a 2003 Domain Controller?
  • No. Most Active Administrator functions work equally on Native Windows 2000 or Windows 2003-based Active Directory environments. However, to use the object-level Restore function you must have at least one Windows 2003 Domain Controller.
  
  
• Doesn't Windows come with built-in AD tools?
  • Windows comes with some AD management tools out of the box, but these tools are limited in functionality and management scope, leaving administrators wanting a more complete management solution. This is the very reason Active Administrator was created - Active Administrator picks up where the native tools leave off. With advanced security administration capabilities, delegation with Active Templates, GPO management, and (new in version 4) object-level AD restores, Active Administrator is a far superior and comprehensive AD management tool.
  
  
• I already use Microsoft Group Policy Management Console (GPMC) for
    my Group Policy Management. Why do I need Active Administrator?
  • Active Administrator manages GPOs and runs RSoP reports in both Windows 2000 and 2003 Server environments. Active Administrator offers a complete GPO management solution including offline GPO management, GPO history rollbacks, and auditing and reporting of all AD changes. For a more comprehensive comparison at the Group Policy Management features found in Active Administrator and GPMC, take a look at our Group Policy Management Comparison Matrix. Beyond Group Policy management, Active Administrator also manages AD security, role-based delegation of AD permissions with Active Templates, auditing of AD management and object-level restores of Active Directory.
  
  
• Can I find out who changed what and when in AD?
    Even going back 12 months?
  • YES! Active Administrator maintains its own auditing database. Providing you have ample disk space to store the audit data, or have archived old entries from your database, you can go as far back as the data you are keeping allows you to.
  
  
• Is there really an "undo" function for AD in Active Administrator?
  • Active Administrator’s Active Directory Object Restore capability allows administrators to restore deleted objects, down to the attribute level. This essentially gives administrators an undo on mistaken deletes or modifications of all objects – user accounts, groups or even entire OUs. In addition, the GPO History function allows for easy corrections to unwanted Group Policy changes.
  
  
• What formats does Active Administrator support for generating reports
    on Active Directory?
  • Active Administrator supports a wide variety of common formats including RTF, PDF, HTML, XLS, TIF, RDF, and Text.