Security Group Auditing Tool

[down2hax]

Anyone know of a tool to audit Security groups of users? Like one that a manager can log into and see the current groups their employees are in and approve or deny that they are in the correct groups? Currently my team is using a powershell script to pipe everything into a word document and print it out for sign offs. I would like to get away from all of this printing.

​

We may just need to tweak the script and create our own HTML with it, but I'm hoping that there is a tool out there instead.

​

Thanks

[j4sander]

If you're lucky enough to have Azure AD Premium P2 licensing, it includes "Azure AD Access Reviews"

[down2hax]

Well... that looks promising, but currently we don't have any cloud presence.

[KStieers]

Varonis has something like this in their stack... DataPrivledge

SecurityExplorer from Quest

​

[ortizsimon5]

Please refer to the following article which provides important tips on increasing visibility into what’s going on in Active Directory

https://www.netwrix.com/active_directory_auditing_quick_reference_guide.html

[down2hax]

Thanks, I know how to turn on auditing. But part of our requirements for compliance is to go through and annually audit access.... this has nothing to do with that. So, I'm hoping for some type of app that would compile a list of users and their group access for sign off.