AD Permissions Reporting Tool

January 13, 2014 — 4 Comments

The first version of my Active Directory permissions reporting tool has now been officially released. There are still plenty of features I will be adding in future updates but even this first version is easier to use and more powerful than other tools out there – but then I would say that wouldn’t I Smile

This is a tool for reporting on security rights and delegated permissions that have been assigned to OUs and other objects in your Active Directory domain – if you’re looking for a tool that reports on file system permissions instead then check out my NTFS Permissions Reporter tool.

A picture paints a thousand words so to give you an idea of how the tool works here’s the main window of AD Permissions Reporter, showing permissions and members of groups used in those permissions:


You can use it to document permissions on every object in the domain, or you can narrow the report down to a specific tree of OUs (or a specific object) and with the powerful filtering system you can find very specific permission configurations – as you can see in the screenshots below.



As always I’ve tried to make this as easy to use as possible (which was difficult as AD permissions are a lot more complex than NTFS permissions) but I’ll be uploading some videos soon that provide step by step guides on how to perform certain tasks and go into more detail on each of the features of the program. For now though there is this general tour of the program:

AD Permissions Reporter Overview


If you think this tool might help you out then you can download the free edition or find out more about the standard edition (and view more screenshots) here:

Oh and a big thank you to everyone that helped with the BETA testing Smile


4 responses to AD Permissions Reporting Tool


    Just downloaded it and tried it out. Awesome! Fast response, quick download of thousands of permissions. Now I just need to figure out the filtering in the GUI and I’ll be all set.

    This is faster than me writing powershell 🙂


      Thanks 🙂 I’m glad to hear that. If you have any questions regarding the filtering feature then feel free to send me an email ( and I’ll be happy to explain in detail


    I have a user de-provisioning script that I want to use with AD Permissions Reporter. Prior to disabling a user account, I want to report on permissions of each user and email to our security group. After the account is disabled, I want another report to verify no access is available. How would I use configure a command line filter for this?

    Thank you!


    Just downloaded it and tested it out. it runs quick, but I was looking for a way to allow an intern to document the permissions on all of our shares, but there are a lot of shares the intern wouldn’t have access to read.

    Any ideas?

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s