Hello Forum,

We've been looking for a tool to audit delegations in our Active Directory and happened to come across a tool called Audit for AD by a company called NetVision.

They claim to show be able to show us you Who has Access to What, but it seems like they're only showing where all a user/group might have permissions in Active Directory, which is something we can already do with other tools.

What we're looking for is a way to find out Who has Access to What based on a determination of Effective Permissions in Active Directory, i.e. not where all a user has permissions, but rather what access that user has actually has.

They also claim to be a finalist of some Info Security Products Guide 2010. Since there are many magazines that companies can virtually buy an endorsement in, I'm wondering how much this really means, only because I've never heard of it.

If anyone has any experience with this product, or knows of a product that can help us audit delegated access in our Active Directory, please feel free to share.

Thanks,

Will.