Active Administrator


Active Administrator

Active Administrator

Active Administrator enables Windows administrators to secure, audit, maintain and recover Active Directory efficiently and effectively – without the immobility and complexity of native administrative tools. Easy to use and easy to install, Active Administrator speeds and simplifies numerous administrative tasks like security, delegation, auditing, GPOs, accounts, sites, trusts, replication and recovery.

Active Administrator - Security and Delegation

Active Administrator - Security and Delegation

Active Administrator's security and delegation features provide organizations with a quick, consistent way to assess security and delegate roles. The feature set also allows organizations to set expiration dates for roles of temporary users, restrict usage of Active Administrator features and export reports on the state of security.

Active Administrator - GPO Management

Active Administrator - GPO Management

Active Administrator Group Policy management features provide organizations with a quick, secure and manageable way to edit and create Group Policy Objects (GPOs). You can assess the status of Group Policies, copy Group Policies across domains, see where Group Policies are stored, edit Group Policy Objects safely, and perform "what if" modeling to determine how changes will affect Group Policy.

Active Administrator - Auditing and Alerting

Active Administrator - Auditing and Alerting

Active Administrator's auditing and alerting features allow you to quickly and accurately recognize changes that occur in Active Directory. An audit agent tracks changes that occur in Active Directory by actively monitoring the security of event logs on each domain controller where it is installed. Upon finding an event of interest, the audit agent sends the information to the auditing database. From the auditing database, you can filter results, save reports and more.

Active Administrator - Accounts, Sites and Trusts

Active Administrator - Accounts, Sites and Trusts

Active Administrator simplifies the maintenance of accounts, sites and trusts. You can easily monitor user activity, purge inactive users and computer accounts, send password reminders and more.

Active Administrator - Health

Active Administrator - Health

Active Administrator's AD health features help you understand, fix and prevent performance-related issues. The feature set helps you understand whether replication between servers is possible; ascertain the status of each domain controller; and maintain the Active Administrator database by purging, reorganizing and restoring data on schedule.

Active Administrator - Backup and Recovery

Active Administrator - Backup and Recovery

Active Administrator's backup and recovery features mitigate the risk of Active Directory mishaps. When an object needs to be restored, you can select the object from a list and restore it, either with all the attributes it possessed when it was backed up, or only the attributes you select. In the case of a container object, you can restore either all objects it contains or only objects of a particular type. You can also preview the object and compare its attributes with those of the same object in Active Directory.

Complete Active Directory management that increases security and productivity with ease

  • Overcome gaps in native tools with an integrated, proactive solution
  • Streamline the application of security policies and permissions
  • Leverage reports and alerts to track changes in Active Directory and Group Policy
  • Restore OUs, users, attributes, security and more from automated backups
  • Manage, report, compare, roll back and analyze Group Policy changes


Active Administrator is a complete, integrated and proactive Microsoft® Active Directory® administration solution that fills the management gaps native tools leave behind. From a single console, the solution addresses the most important areas of Active Directory including security and delegation, auditing and alerting, backup and recovery, Group Policy, health and replication, and accounts and configurations. Active Administrator makes it easier and faster than native tools to meet auditing requirements, tighten security, maintain business continuity and increase IT efficiency.

Overcome gaps in native tools with an integrated, proactive solution

Manage the most important elements of Active Directory from one solution with integrated functionality. Simpler and faster than using multiple native tools or point solutions, an integrated approach helps you meet auditing requirements, tighten security, increase productivity and improve business continuity with ease.

Streamline how security policies and permissions are applied

Get a quick understanding of AD security with Active Administrator’s tree view of containers and associated objects. Then delegate control quickly and consistently with customizable, reusable and self-healing templates. Finally, enhance password security by implementing fine-grained password policies (FGPPs) for individual users or groups. Eliminate over-privileged users by assessing, standardizing and applying security policies and permissions.

Leverage reports and alerts to track changes in Active Directory and Group Policy

Quickly report on changes by filtering event type, user, date and more. Then schedule reports for automatic generation and email delivery. Using report data, you can configure event alerts and automate alert-based actions, enabling you to quickly respond to – and correct – improper changes to AD. With Active Administrator, it’s easy to track Active Directory changes and meet auditing requirements.

Restore OUs, users, attributes, security and more from automated backups

Save time by scheduling automated backups of Active Directory. Then easily recover entire AD objects or just particular security settings or attributes; or quickly restore a GPO to a previous known state. The ability to granularly recover Active Directory and Group Policy ensures business continuity when unwanted changes or deletions occur.

Manage, report, compare, rollback and analyze Group Policy changes

Copy, edit and test GPOs in a secure, offline environment. Simulate changes and test “what-if” scenarios using modeling capabilities. Comparison reports help you quickly understand GPO changes. You can also stay on top of GPO changes with automated checks, and easily roll back a GPO to a previous known state. These advanced management capabilities allow you to operate more efficiently.


Consistent and standardized security management
Active Administrator’s permission template technology, Active Templates, allows you to quickly create and manage sets of permissions to be applied to objects in Active Directory. Unlike the Delegation of Control wizard, any changes made using Active Templates can be repaired or removed. Simple graphical indicators allow you to see where the templates are applied and the status of each.
Security assessment
Assess Active Directory security with the ability to see “who has access to what.” The feature provides a hierarchical view of the containers linked to a domain controller, the objects stored within those containers and all associated permissions, including permissions applied with Active Templates. Quickly identify security issue by filtering for inheritance and viewing group membership.
Object and permission security search
You can find AD objects and their associated permissions quickly with Quick Search. You can find AD objects or find permissions associated with a particular AD object, with filtering in the search by accounts, access types, generic rights and more. You can also search for an AD object and take action from the same screen.
Audit view of configuration changes
Within seconds see “before” and “after” values of configurations to determine what changed, who changed it, when it was changed and from which workstation. The audit filter allows you to filter in the search, segmenting data by date/time range, acting user, event type and more. The easily accessible view gives you the ability to find what you need, quickly.
Customizable audit reports
The reporting feature allows you to save, organize and export audit data into an easily accessible format. Active Administrator includes a number of out-of-the-box reports, but you can also customize reports to include criteria such as event type, acting user, date/time and more. Customizable audit reports provide the ability to provide auditors and internal stakeholders with the information they need.
Proactive change alerts and notifications
Receive automated alerts whenever a predefined change event occurs, allowing you to quickly take action. It also provides a history of alerts that were activated, allowing you to track which alerts occur most frequently. Creating an alert is as simple as selecting an event definition and populating an email address. You can also configure alert quiet times, thresholds and filters.
Offline Group Policy Object editing
Offline GPO editing provides the ability to make a copy of the GPO that you can edit in an offline repository, without interfering with the normal operation of Active Directory. When editing is complete, you can publish the changed GPO in a single operation. The offline environment offers a secure and risk-free approach to GPO editing.
Group Policy Object comparison reports
Comparison reporting allows you to see the differences between two historical versions of a GPO to identify what changes were made between two different points in time. See what was changed, added or removed, along with a statistical summary of variances. Comparison reports make GPO editing more efficient.
Group Policy Object modeling
“What if” modeling mitigates the risk of pushing a Group Policy to your production environment by projecting how changes will affect a GPO. You can get an exact picture of how your actions will affect Group Policies by testing how the removal of objects from OUs, sites and security groups will affect application and errors on remote machines.
Automated backup of Active Directory objects
Simplify daily backups by automatically backing up Active Directory objects. You can schedule backups to run once or twice a day, at a time you specify. This flexibility removes the human error that often occurs with manual backups.
Object, attribute and security recovery
Quickly recover entire AD objects, individual attributes or even just permissions. Within seconds you can recover any element of an Active Directory object from an archive you choose. Granular recovery supplements tape backups and ensures business continuity when unwanted changes occur.
Inactive account management
Active Administrator provides you with an automated way to remove dormant users and computers that would otherwise bloat your Active Directory. You can report on inactive accounts, remove inactive accounts and view a history of inactive accounts.
User activity dashboard
The user activity dashboard provides a quick look into Active Directory activity. You can monitor events such as created accounts, disabled users and more. You can also control the duration of the activity and look at multiple domains.
Replication analyzer
Active Administrator can analyze whether replication of a server or forest is possible. Errors are displayed with graphical indicators.
Active Directory health assessment reports
Assessment reports help you understand the health of your AD environment. The forest configuration report contains information about the forests, sites, domains and trusts. The replication health and status report contains information about the replication status for each domain controller, as well as any errors that occurred during the replication process. You can schedule the reports.


Server requirements

  • 1 GHz Pentium

Disk Space

  • 100 MB

Memory (RAM)

  • 512 MB

Operating systems

  • Microsoft® Windows Server 2003® or higher
  • Microsoft® Group Policy Management Console
  • Microsoft® .NET Framework 4.0 or higher

Server installation

  • Group Policy Management Console (GPMC)
  • Microsoft® SQL Server® 2000 or higher
  • Microsoft SQL Express (all editions)

Console requirements

  • 1 GHz Pentium
Disk Space
  • 100 MB
Memory (RAM)
  • 256 MB
Screen resolution
  • 1024x768 (16-bit)
Operating systems
  • Windows XP or higher

Detailed requirements

Download free trial to see the full list of system requirements.