AD360

The system enables simultaneous auditing of multiple domains across different controllers, delivering complete information on logins, user management, and changes to groups and organizational units (OUs). Administrators gain insight into GPO policy modifications, DNS server settings, and LAPS password auditing. This ensures that every change in the permission structure, even the smallest one, is recorded and ready for immediate verification in the administrative panel.

ADAudit Plus provides detailed control over file access, recording every attempt to open, modify, copy, or delete files. The system also monitors print servers, external storage device (USB) usage, and tracks PowerShell script execution on endpoints. This enables effective detection of data leaks and monitoring of privileged user activities directly on their workstations.

The software enables configuration of advanced alerts based on threshold values. The system analyzes event frequency, criticality, and user context, allowing it to distinguish routine activities from real attacks. This ensures administrators are not overwhelmed with irrelevant messages—they receive a signal only when the situation genuinely requires intervention.

To ensure instant response to critical events, the system offers multi-channel notifications via email, SMS, or automatic ticket creation in the service desk system. Additionally, ADAudit Plus allows automatic execution of remediation scripts in response to specific alerts, e.g., immediately locking an account of a user who started mass-deleting files from the server, enabling the attack to be stopped in a fraction of a second.

The tool features an extensive library of out-of-the-box reports that answer the most common auditor questions and regulatory requirements. Administrators can also easily create custom, personalized reports with clear charts and dynamic data ranges. These reports facilitate quick assessment of the organization’s security posture and are ready for presentation without additional graphic processing.

The system features an advanced log archiving mechanism that compresses older records in a secure repository. This solution enables storage of historical data for many years, essential for maintaining regulatory compliance, without the need to invest excessively in expensive disk space. Administrators have constant access to archived data, enabling analysis of incidents that occurred in the past.

The application includes a built-in backup module that protects the Active Directory structure from the effects of failures or erroneous changes. This function enables protection of all domain resources, including group memberships, hierarchies, and user attributes. When needed, the system allows precise restoration of a specific object or an entire domain branch, minimizing downtime.

The system enables mass operations, such as creating users, changing permissions, or managing policies, without switching between multiple tools. Using a single console, administrators can manage computers, groups, contacts, as well as OUs and file servers. This approach allows for full control over the lifecycle of objects in the domain, ensuring order in the organizational structure.

The software offers a wide range of built-in report templates that allow for instant verification of domain configuration correctness. Administrators can easily generate reports on inactive users, expired passwords, or empty groups, among others. Regularly reviewing this data helps maintain a high level of security and hygiene in the Active Directory environment.

The platform simplifies the process of granting and revoking permissions to folders and network shares. An administrator can change permissions for a single person or an entire group in seconds, using clear inheritance and permission reset options. This function allows for quick restoration of order in resource access with a single click, significantly enhancing file data security.

The system allows for the creation of advanced templates that automatically populate data fields based on defined dependencies. This minimizes the effort required to onboard a new employee, as most attributes are filled in automatically. Using templates ensures that every account in the organization is configured according to the adopted standard, eliminating the probability of error.

ADManager Plus enables secure inclusion of HR department employees in administrative processes by providing them with dedicated forms. An HR employee can fill in the data of a new hire, and the built-in automation will assign appropriate permissions and groups according to their position. The administrator’s role is limited to final approval of the completed request, which shortens task completion time.

The application has a built-in backup module that protects the Active Directory structure from failures or erroneous changes. This feature allows for securing all domain resources, including group memberships, hierarchy, and user attributes. If necessary, the system enables precise restoration of a specific object or an entire domain branch, minimizing downtime for the organization.

The system allows for enforcing additional identity verification during login to computers, business applications, and the self-service portal itself. ADSelfService Plus supports a wide range of authentication methods, including email and SMS codes, Google and Microsoft Authenticator apps, Yubikey, biometrics, and FIDO2 and SAML standards. This flexibility allows companies to choose the security method best suited to the needs of different employee groups.

We can precisely define rules based on which a user gains access to system functions. Conditional access allows for restricting permissions based on geolocation, IP address, device type, or specific working hours. This creates a secure environment where sensitive operations, such as password changes, can only be performed from trusted networks or during secure VPN sessions.

This solution effectively eliminates the problem of forgotten passwords, which generates a significant portion of IT department maintenance costs. Users, using a browser or mobile application, go through a short verification procedure, after which their password is automatically reset in Active Directory. Such a process takes only a few seconds and requires no administrator intervention, significantly increasing workflow fluidity across the entire company.

The system allows for defining custom password requirements that go beyond basic Active Directory options. We can mandate specific characters, prohibit the use of dictionary names, or enforce more frequent credential changes for high-privilege accounts. Intuitive reports continuously inform administrators about the level of password compliance with company policy and user activity regarding MFA methods.

ADSelfService Plus enables the delegation of simple administrative tasks directly to users. With administrator consent, employees can independently update non-critical information in their profile, such as phone number, home address, or surname after a change in marital status. Each such change is immediately synchronized with Active Directory, ensuring that the company’s address book and databases are always up-to-date without involving the IT team.

RecoveryManager Plus offers an advanced monitoring module that provides a detailed overview of backups. The system automatically identifies changes made since the last backup, presenting the exact number of added, modified, or deleted attributes in the web interface. The intuitive dashboard allows filtering object types for individual domains and monitoring the time required to complete tasks, enabling administrators to quickly assess data protection status and efficiently manage disk space allocated for archives.

The system implements a unified backup concept, allowing management of backups for multiple platforms from a single console. RecoveryManager Plus supports not only on-premise Active Directory but also Microsoft 365 environments, including Exchange Online, SharePoint Online, OneDrive for Business, and Teams. Additionally, the tool offers support for Google Workspace (Drive, Gmail, Contacts, Calendar) and Zoho platforms. The wide spectrum of supported services ensures that organizations are protected against data loss, regardless of whether data is stored on their own servers or in the public cloud.

The software enables the restoration of a single attribute or an entire AD object online. This feature eliminates the need to put domain controllers into Directory Services Restore Mode (DSRM), which in traditional solutions led to user authorization downtime. The system allows seamless recovery of deleted users, groups, OUs, GPOs, and even DNS configurations directly from the browser interface. This enables administrators to react to incidents in real-time, minimizing the impact of failures on business processes.

RecoveryManager Plus features a unique Rollback functionality for instantly undoing unwanted changes in the Active Directory infrastructure. This is particularly helpful in situations where permissions were mistakenly granted to a large group of people or administrative scripts were incorrectly modified. Instead of manually searching logs and correcting each object individually, an administrator can, with a single click, restore an entire domain branch or selected objects to their state before the error occurred. This function drastically reduces the time to repair the environment and eliminates the risk of leaving permission gaps after an incident.

The software allows defining complex retention policies that specify how long individual backup versions should be stored in the repository. The system automatically manages the cleanup of outdated data, optimizing disk resource utilization while maintaining compliance with security policies and legal regulations. Administrators can configure separate rules for different resource types (e.g., longer retention for executive mail, shorter for test accounts), providing flexibility in building data protection strategies for large organizations.

The system offers an advanced management dashboard that graphically presents the most important health parameters of Exchange servers. The dashboard allows for immediate identification of mailboxes with the largest data growth and servers approaching disk capacity limits. The tool also monitors key technical parameters, ensuring smooth operation of services and protecting the organization from sudden failures resulting from database overflow or system process overload.

Exchange Reporter Plus provides an extensive reporting module that includes analysis of mailbox sizes, public folder structures, and large attachments. Administrators can use advanced filters, including keyword-based content search, which is essential during internal investigations. The system enables monitoring of OWA (Outlook Web Access) activity and ActiveSync devices, providing data on phone models and operating system versions connecting to the mail infrastructure. Each generated report can be exported to CSV, PDF, XLS, or HTML formats for further analysis.

The tool ensures high transparency of operations on both local Exchange servers and Exchange Online within Microsoft 365. Users can generate audit reports for any period, including specific domains and activities registered outside standard working hours. Thanks to the scheduling function, these reports can be automatically generated and saved to a specified disk path or sent via email to relevant personnel, ensuring continuous oversight of communication security without the need for manual analysis.

The system offers a module for detecting changes in user permissions and DAG (Database Availability Group) configurations. Exchange Reporter Plus monitors all attempts to modify access to other users’ mailboxes and changes in database structure. In case of unauthorized or critical changes, the system immediately informs the administrator via SMS or email. These alerts are fully configurable, allowing for precise prioritization of notifications and quick response to incidents that could threaten the integrity of corporate data.

The software allows for precise tracking of every message passing through the organization’s servers, providing information about the sender, recipient, and message size. This function enables analysis of mail traffic intensity at different times of the day and detection of anomalies, such as mass email sending, which may indicate a workstation infection. Additionally, the system provides detailed insight into the types and names of transmitted attachments, which supports security departments in combating information leakage and protects against the distribution of dangerous files within the corporate network.

The system offers a comprehensive administrative module that enables bulk operations on users, groups, and mailboxes across the entire environment. Administrators can create, modify, block, or delete accounts simultaneously in Exchange Online and Microsoft Entra ID with just a few clicks. The software also allows for precise management of multi-factor authentication (MFA) settings and assignment of licenses based on dynamic rules. This centralization of actions eliminates the need to switch between multiple Microsoft consoles, significantly accelerating employee onboarding and offboarding processes.

M365 Manager Plus boasts an extensive library of over 700 built-in reports that provide detailed data on mail traffic, OneDrive file sharing, and Microsoft Teams activity. The system allows for creating custom reports and generating them periodically according to a schedule, with automatic delivery of results to selected individuals in PDF, XLS, or HTML formats. Thanks to dedicated compliance reports, organizations can easily demonstrate adherence to security standards to auditors by monitoring, among other things, access to third-party mailboxes and changes in security policies.

The platform provides continuous oversight of all critical activities within the tenant, offering graphical summaries of historical and current events. Every significant operation, such as administrator login, folder permission changes, or new group creation, is recorded and can trigger an immediate alert. The notification system allows for full customization of message content and the application of sensitivity thresholds, preventing administrators from being overwhelmed by excessive messages while maintaining vigilance against real threats. All audit data is stored for any desired duration, which is crucial for post-factum analysis.

The tool allows for defining sequential actions that are automatically executed in response to specific events or reports. It’s possible to configure “set and forget” processes, such as automatically blocking user accounts inactive for over 90 days or resetting passwords nearing expiration. This approach not only saves hundreds of IT department hours but also ensures that security processes are performed timely and flawlessly, enhancing the digital hygiene of the entire cloud environment.

The application features an advanced Content Search module that allows searching mailbox content and files to find specific information. Administrators can locate emails based on title, content, attachment presence, or keywords, which is crucial during internal investigations and detection of sensitive data leaks. The system also monitors the health of all applications within Microsoft 365, informing about planned technical breaks and Microsoft infrastructure failures, enabling proactive communication with end-users about service availability issues.

M365 Manager Plus allows for secure distribution of administrative tasks among technicians without requiring them to have high-level permissions within Microsoft 365. With the HelpDesk technician role, an administrator can grant access only to selected functions, such as password resets or report generation for a specific department. This upholds the principle of Least Privilege and protects the organization from the consequences of potential errors or misuse by support staff, while also accelerating the handling of employee requests.