Active Administrator allows administrators to manage Active Directory Security and Group Policies more efficiently, reducing the total cost of ownership for Windows® 2000.
Manage Delegation of Control in Active Directory with Active Administrator
Define templates for each administrative role in your enterprise.
Apply templates to organisational units to delegate administrative control.
Check native permissions against defined templates to ensure the integrity of security.
Report on who has been delegated administrative control to which Active Directory objects in entire domains or single OU structures.
Tighten Active Directory Security with Active Administrator
Simplified view of Active Directory permissions (no more "special" permissions).
Filter default and inherited permissions from view so you can focus on delegated permissions.
Use the search function to find and report where a group or user has administrative control in Active Directory.
Fault Tolerant Group Policies with Active Administrator
Backup Group Policy Objects to disk, including a PDF report on the settings as they were when the policy was backed up.
Quickly restore Group Policy Objects if a corruption occurs, or changes to a GPO present a negative impact to users.
Replicate Group Policy Objects across domains and forests, optionally keeping the security in tact and migrating GPO Links to the new domain or forest.
Advanced Group Policy Planning with Active Administrator
Active Administrator provides Resultant Set of Policies (RSoP) calculations to report on exactly which GPO settings will be applied to a user when logging onto a particular machine, including advanced "what-if" scenarios.
View detailed GPO settings reports to show exactly which settings are configured.
Provides a centralized view of all Group Policies in a domain for easy management.
Provides a "Group Policy by Container" view of Group Policies to quickly view which organizational units (OUs) have GPOs linked to them without having to view any property pages.
Active Administrator allows you to view a resultant set of group policies that apply to a specific user on a specific computer, report on the list of group policies that apply and get a detailed report of the exact policies that apply. What if a user moves to another OU? What if the computer moves to a new site? Active Administrator is fully capable of determining the outcome of these scenarios.
Report on Active Directory and Group Policy Objects
Active Administrator incorporates a full suite of reports that allow you to efficiently manage your Active Directory enabled environment. You can report on security, object classes, Group Policy settings, Group Policy affected registry keys and more.
Resultant Set of Policies (RSoP)
With Active Administrator, you can achieve in seconds what would normally take hours. View the resultant set of group policies that apply to a specific user on a specific computer. Report on the list of group policies that apply, or get a detailed report of the exact policies that apply. Full capabilities for "what-if" scenarios like "What if a user moves to another OU?" or "What if the computer moves to a new site?".
Copy Group Policy objects between domains
With Active Administrator, you can seamlessly copy Group Policy objects between domains and migrate the Security Group Filters and Group Policy Links on them. This makes it easy to configure Group Policy objects in a production environment that are identical to a test environment or to deploy a Group Policy object to a remote site that would have otherwise been impossible.
Backup and restore Group Policy objects
The Backup\Restore function allows you to backup and restore Group Policy objects for modular deployment, archival purposes, or simply fault tolerance. This includes the backing up of the GPO's security filters and group policy links.
Report on Delegation of Control
After using the "Delegation of Control Wizard" in Active Directory, you may find it difficult (if not impossible) to report on the permissions that the wizard modified. Active Administrator makes this problem disappear with its Delegated Permissions Report. It filters out default permissions to leave you with a summary report of all delegated permissions down the tree.
Modify security on Active Directory objects
It is now easier and quicker than ever to properly set permissions on objects in Active Directory.
Search for permissions on Active Directory objects
If you want to know where the "Help desk" group has the "Reset password" right in your domain, this can be a daunting task manually. With Active Administrator, you can search for permissions in Active Directory across your entire domain in one easy step.
Easily manage Group Policy links
Active Administrator includes a simple method for the addition, deletion and viewing of Group Policy object links across domains in your Active Directory enabled environment.
Group Policy Objects, Settings and Filters
Resultant Set of Policies (RSoP)
Active Directory Security
DOCUMENTATION, WHITE PAPERS and OTHER FILES
Active Administrator Evaluation Guide
Active Administrator http://mcpmag.com/reviews/products/article.asp?EditorialsID=375
Date January 2003
Author Ronald Stewart
Active Administrator is licensed on a per-user basis. A license must be purchased for each user in the domain you will be administering. Minimum purchase of 100 users.
Active Administrator includes Maintenance & Upgrade for 1 year. Maintenance & Upgrades are available for 2 years.
Windows XP Professional
Windows 2000 Server
Windows 2000 Professional
Other platforms supported
Windows 2003 Standard Server
Windows 2003 Enterprise Server
CPU Pentium 200
HD (Install) 25MB
HD (Operating) 20MB
What is Active Administrator and why do I need it?
Active Administrator is a complete Active Directory and Group Policy management tool, designed to replace the built-in utilities that are provided with Windows 2000 networks.
Can't I just use the built-in tools like Active Directory Users and Computers?
While Active Directory Users and Computers does provide for basic management of Active Directory, it is much more cumbersome and less functional than Active Administrator. Active Administrator significantly builds on this basic functionality and includes a much more intuitive interface.
Does Active Administrator run on Windows NT 4.0?
Unfortunately the limitations of the operating system prevent Active Administrator from installing and running on anything other than Windows 2000 and later operating systems.
Does Active Administrator provide any disaster recovery for Active Directory?
Yes. Active Administrator has the ability to backup and restore Group Policy objects. This protects these mission critical policies from accidental modification or deletion.
Does Active Administrator require any agents or client software to be installed on my servers?
No. Active Administrator allows for complete management of your entire Active Directory environment from a single console.
Can I manage multiple domains using Active Administrator?
Yes. Active Administrator not only allows you to manage multiple domains, but also allows you to manage domains in discontiguous forests. The interface allows you to manage all of these domains at the same time.
Does Active Administrator require any changes to Active Directory Schema?
No. Active Administrator is fully functional without schema modification and can be removed as easily as it is installed.
Does Active Administrator perform any kind or Resultant Set of Policy (RSoP) calculations and reporting?
Yes. Active Administrator allow you to develop views of your Group Policy implementation based on several factors and generate useful reports based on this information.
Can I use Active Administrator to set security on all objects in Active Directory?
Actually, Active Administrator allows you to modify security on Active Directory Configuration and Schema objects in addition to all of the other types of objects in Active Directory.
How is Active Administrator licensed?
Active Administrator is licensed on a per user basis. Every user account in Active Directory must have a license purchased for them. There is not need to purchase licenses for servers or computer objects in Active Directory.