Has anyone tried the Free Permissions Analyzer from SolarWinds as seen on Petri?
Hello,
The other day, I came across some website called Petri IT Knowledgebase, which seems to have a set of some articles on AD and other stuff.
Anyway, on top of most AD related pages on the website, there seem to be a paid advertisement / endorsement from Petri for some product called Free Permissions Analyzer from SolarWinds, and it specifically reads as follows...
"FREE: Discover Active Directory Effective Permissions In..."
Whenever I see something so flashy with a FREE offering, I am always hesitant to even click on the link, because it just sounds too good to be true.
I have been looking for a way to determine Effective permissions in Active Directory for a long time now, so I would like to know if this product can really discover effective permissions in Active Directory.
Has anyone tried this product? By endorsing it on every page, this Petri website seems to be putting its reputation behind it, although I have no idea what its reputation is too?
If you have tried, and it works, could you please share your thoughts?
I've tried the Free Permissions Analyzer from SolarWinds and I can tell you that it has NOTHING to do with determining effective permissions in Active Directory.
In fact, this has to be one of the most misleading programs I have come across.
The Petri website is actually run by some Microsoft MVP by the name of Daniel Petri, and based on his credibility, I followed the link to download the software. I was deeply disappointed and I've heard many people share the same experience.
I don't mean to be paranoid, but, it sounds like a wonderful example of how someone could distribute a Trojan Horse, for the following reasons -
It is worded to entice you by claiming to deliver on a very desirable capability
It is offered for FREE, thus compelling you to try it in your environment
It is not even digitally signed so you have no idea who actually wrote it
Finally, it is only when you have installed and run it that you find out that it has nothing to do with determining effective permissions in AD.
Any IT security expert will tell you that malicious software only needs to be run ONCE in your environment, for it to compromise your systems. That's the only shared experience I've heard others had with this tool i.e. you open (run) it and then you realize this has nothing to do with what it claims to do.
I find it rather disappointing that a Microsoft MVP would put his reputation on the line for this. Incidentally, if you view his bio (on his website), it reads as though he is second only to Bill Gates. I know many MVPs, and while I have no doubt that he may be smart, such unbridled self-praise is not expected of an MVP.
I would steer clear of this absolutely misleading tool.
Nathan.
-- Edited by Nathan on Saturday 18th of June 2011 04:11:41 PM