We migrated to Active Directory and set up a load of delegated permissions, but now we don't know “who can do what”. How do we clean it all up?
This is a common problem. Native AD tools have the ability to establish delegated permissions, but no simple way to identify and report on those delegations. Active Administrator makes it easy to find assigned permissions and generate reports to begin the cleanup process. With Active Administrator you assign delegated permissions using Active Templates, which make it easy to track who can do what, and let you quickly revoke or edit delegations.

 

Do I need to have a 2003 or 2008 Domain Controller? Will it work with Windows 2000? Does it support Windows Server 2008 and 2008 R2?
Active Administrator works great in Active Directory built on Windows Server 2000, 2003, 2008, 2008 R2, or any mixture of them. One important note is that to use the object-level Restore function you must have at least one Windows 2003 or 2008 Domain Controller on the domain.

 

Is there a way to tell what the value of an attribute in AD was before the change was made?
Yes! Active Administrator collects all information regarding changes, including who made the change, when, where - and the before and after values. And with our real-time event viewer and formatted reports, you can accurately show those values for all attribute changes

 

What about built-in AD tools?
Windows comes with some AD management tools out of the box, but these tools are limited in functionality and management scope. This is the very reason Active Administrator was created – you can leverage your existing investment in Active Directory coupled with Active Administrator that provides advanced security administration capabilities, centralized auditing and alerting, delegation and permission management, Group Policy management and object-level AD recovery.

 

I already use Microsoft Group Policy Management Console (GPMC) for my Group Policy Management. Why do I need Active Administrator?
Active Administrator offers a complete GPO management solution including offline GPO management, advanced RSoP modeling, GPO history and rollback, and auditing and reporting of all AD changes including Group Policies. For a more comprehensive comparison at the Group Policy Management features found in Active Administrator and GPMC, take a look at our Group Policy Management Comparison Matrix.

 

Can I find out who changed what and when in AD? Even going back 12 months?
YES! Active Administrator maintains its own auditing database. You can go as far back as you want!

Is there really an "undo" function for AD in Active Administrator?
Active Administrator’s recovery capability allows administrators to selectively recover deleted containers, users, groups, computers and other objects, and also to restore changed attributes. This essentially gives administrators an “undo” inadvertent deletions or modifications of all objects and even entire OUs. Additionally, the Group Policy History function allows for easy corrections to unwanted Group Policy changes.

What formats does Active Administrator support for generating reports on Active Directory?

Active Administrator supports a wide variety of common formats for reports and includes the ability to save or email the reports as PDF, HTML, MHT, FTF, Excel, CSV, Text or Image format (BMP, GIF, JPG, EMF, WMF, PNG, TIFF).

How is Active Administrator licensed?
Active Administrator is licensed by the number of enabled user accounts in the licensee’s Active Directory.

Can I use my license for a selected group of users, or for just part of the domain, or just 1 of my domains?
No. You must purchase 1 user license for every enabled user account in the licensee’s Active Directory where Active Administrator is used, regardless of the number of sites, domains or OUs.

What user license quantities are available?
Licenses can be bought in any quantity above the minimum of 50.

Can I move licenses from one server to another?
Licenses are not tied to particular domain controllers or member servers.

What happens if I exceed my license count?
The process is the same for all products; contact sales@dbl.co.uk to purchase more licenses. When your order has been processed you will be provided with a new electronic license for the total quantity of licenses you purchased.

Using ScriptLogic products in excess of the licenses you have purchased and installed is a violation of the End User License Agreement (EULA). You are required to ensure you have sufficient licenses for the number of enabled users in your Active Directory.

Is an evaluation license available? What restrictions does it have?
Yes, a 30-day evaluation license is available from the download page. The only restriction is that it expires after 30 days.

Can I extend my evaluation?
You can request an extension for an evaluation license, contact sales@dbl.co.uk

How do I find out how many licenses I have installed?
In Active Administrator, click on "Help" then "About Active Administrator".

How do I find out how many licenses I've used?
Within the Active Administrator Console use the "Active Directory Security" tab, while in the tree view right-click on a domain and select "View All Users". This lists the users and counts the total number in each domain.

 

You can also check with your Active Directory or Network Administrator to confirm the total number of enabled users in your Active Directory Domains, as this is also the number of licenses that Active Administrator has used.

How do I install the Management Console on multiple workstations?
Every time you install Active Administrator on a workstation you must re-apply the original license file supplied to you.