ADAudit Plus

The system enables mass operations, such as creating users, changing permissions, or managing policies, without switching between multiple tools. Using a single console, administrators can manage computers, groups, contacts, as well as OUs and file servers. This approach allows for full control over the lifecycle of objects in the domain, ensuring order in the organizational structure.

The software offers a wide range of built-in report templates that allow for instant verification of domain configuration correctness. Administrators can easily generate reports on inactive users, expired passwords, or empty groups, among others. Regularly reviewing this data helps maintain a high level of security and hygiene in the Active Directory environment.

The platform simplifies the process of granting and revoking permissions to folders and network shares. An administrator can change permissions for a single person or an entire group in seconds, using clear inheritance and permission reset options. This function allows for quick restoration of order in resource access with a single click, significantly enhancing file data security.

The system allows for the creation of advanced templates that automatically populate data fields based on defined dependencies. This minimizes the effort required to onboard a new employee, as most attributes are filled in automatically. Using templates ensures that every account in the organization is configured according to the adopted standard, eliminating the probability of error.

ADManager Plus enables secure inclusion of HR department employees in administrative processes by providing them with dedicated forms. An HR employee can fill in the data of a new hire, and the built-in automation will assign appropriate permissions and groups according to their position. The administrator’s role is limited to final approval of the completed request, which shortens task completion time.

The application has a built-in backup module that protects the Active Directory structure from failures or erroneous changes. This feature allows for securing all domain resources, including group memberships, hierarchy, and user attributes. If necessary, the system enables precise restoration of a specific object or an entire domain branch, minimizing downtime for the organization.

The system allows for enforcing additional identity verification during login to computers, business applications, and the self-service portal itself. ADSelfService Plus supports a wide range of authentication methods, including email and SMS codes, Google and Microsoft Authenticator apps, Yubikey, biometrics, and FIDO2 and SAML standards. This flexibility allows companies to choose the security method best suited to the needs of different employee groups.

We can precisely define rules based on which a user gains access to system functions. Conditional access allows for restricting permissions based on geolocation, IP address, device type, or specific working hours. This creates a secure environment where sensitive operations, such as password changes, can only be performed from trusted networks or during secure VPN sessions.

This solution effectively eliminates the problem of forgotten passwords, which generates a significant portion of IT department maintenance costs. Users, using a browser or mobile application, go through a short verification procedure, after which their password is automatically reset in Active Directory. Such a process takes only a few seconds and requires no administrator intervention, significantly increasing workflow fluidity across the entire company.

The system allows for defining custom password requirements that go beyond basic Active Directory options. We can mandate specific characters, prohibit the use of dictionary names, or enforce more frequent credential changes for high-privilege accounts. Intuitive reports continuously inform administrators about the level of password compliance with company policy and user activity regarding MFA methods.

ADSelfService Plus enables the delegation of simple administrative tasks directly to users. With administrator consent, employees can independently update non-critical information in their profile, such as phone number, home address, or surname after a change in marital status. Each such change is immediately synchronized with Active Directory, ensuring that the company’s address book and databases are always up-to-date without involving the IT team.

AD360 serves as a central pillar of administration, enabling simultaneous creation, modification, and deletion of accounts across Active Directory, Exchange, Office 365, and Google Workspace services. The system allows for building advanced workflow processes that automate access provisioning to resources and mailbox creation directly during employee onboarding. This approach enables administrators to manage permissions across the entire IT ecosystem without switching between multiple native tools, ensuring data consistency and time savings.

The platform enables detailed monitoring of all changes occurring in directory services, Windows servers, and Exchange environments. The system tracks user logons, account attribute changes, group modifications, and file permissions in real-time. With an extensive library of ready-made reports, AD360 facilitates adherence to stringent regulations such as PCI DSS and GDPR. All data can be automatically generated on a schedule and sent in selected formats (PDF, XLS, CSV) to security personnel or directly to file servers.

The system streamlines access to corporate applications by offering a Single Sign-On (SSO) mechanism. AD360 has a database of over 120 pre-configured cloud and on-premises applications, for which access implementation requires only basic address and port configuration. End-users can log in to their work tools without repeatedly entering credentials, which enhances user experience and password security. The platform also supports adding custom applications via standard protocols such as SAML, OAuth, or OpenID.

AD360 allows simple administrative tasks to be delegated directly to employees, enabling them to self-reset passwords and unlock accounts from a web portal or mobile application. Employees can also independently update their personal data in the AD directory (e.g., phone number or residential address), ensuring the accuracy of company databases without involving the IT department. This feature significantly reduces the number of Help Desk tickets, allowing administrators to focus on more complex projects.

The system offers an automation engine that allows defining rules for repetitive administrative tasks. It is possible to configure processes that automatically move inactive users to dedicated OUs, block their accounts after a specified period of inactivity, or delete unnecessary resources. These automations operate based on detailed reports, ensuring that every action is justified by the actual state of the environment, thereby increasing the hygiene and security of the entire Active Directory system.

AD360 has built-in data protection mechanisms that allow for incremental backups of AD objects, Exchange mailboxes, SharePoint Online sites, and OneDrive resources. The system enables not only full disaster recovery but also selective restoration of individual object attributes without affecting the rest of the environment. The unique Rollback function allows for instant reversal of incorrectly introduced mass changes, eliminating the consequences of administrative errors and ensuring the continuity of critical business services.

RecoveryManager Plus offers an advanced monitoring module that provides a detailed overview of backups. The system automatically identifies changes made since the last backup, presenting the exact number of added, modified, or deleted attributes in the web interface. The intuitive dashboard allows filtering object types for individual domains and monitoring the time required to complete tasks, enabling administrators to quickly assess data protection status and efficiently manage disk space allocated for archives.

The system implements a unified backup concept, allowing management of backups for multiple platforms from a single console. RecoveryManager Plus supports not only on-premise Active Directory but also Microsoft 365 environments, including Exchange Online, SharePoint Online, OneDrive for Business, and Teams. Additionally, the tool offers support for Google Workspace (Drive, Gmail, Contacts, Calendar) and Zoho platforms. The wide spectrum of supported services ensures that organizations are protected against data loss, regardless of whether data is stored on their own servers or in the public cloud.

The software enables the restoration of a single attribute or an entire AD object online. This feature eliminates the need to put domain controllers into Directory Services Restore Mode (DSRM), which in traditional solutions led to user authorization downtime. The system allows seamless recovery of deleted users, groups, OUs, GPOs, and even DNS configurations directly from the browser interface. This enables administrators to react to incidents in real-time, minimizing the impact of failures on business processes.

RecoveryManager Plus features a unique Rollback functionality for instantly undoing unwanted changes in the Active Directory infrastructure. This is particularly helpful in situations where permissions were mistakenly granted to a large group of people or administrative scripts were incorrectly modified. Instead of manually searching logs and correcting each object individually, an administrator can, with a single click, restore an entire domain branch or selected objects to their state before the error occurred. This function drastically reduces the time to repair the environment and eliminates the risk of leaving permission gaps after an incident.

The software allows defining complex retention policies that specify how long individual backup versions should be stored in the repository. The system automatically manages the cleanup of outdated data, optimizing disk resource utilization while maintaining compliance with security policies and legal regulations. Administrators can configure separate rules for different resource types (e.g., longer retention for executive mail, shorter for test accounts), providing flexibility in building data protection strategies for large organizations.