Beyondtrust

PowerBroker Privilege Explorer
for Active Directory and File Systems

Tighten security and access management procedures across Windows Active Directory and file systems.

Centralized Viewing and Management of Enterprise Wide Active Directory and File System Permissions

PowerBroker Privilege Explorer automates the process of analyzing and reporting on who has access to Active Directory and File System permissions. The solution delivers a centralized view of access and privileges, allowing administrators to know who has access to which resources while enabling them to identify potential exposures of sensitive information and intellectual property. With PowerBroker Privilege Explorer, you can be sure that users have access to the resources they need to do their jobs – and only to those resources.

  • Report on who has access to directory resources for SOX, PCI, HIPAA and other compliance mandates
  • Determine who had access to Active Directory resources when an incident occurred
  • Provide data and business owners with reports on who can access their objects
  • Compare permissions over time for specific resources and drill into the integrated logs of PowerBroker Auditor to see how these permissions were changed
  • Easily roll back directory permissions to an authorized state to adhere to corporate policy
  • Verify permission changes with provisioning systems to reduce risk of excessive access
Active Directory Privilege Management - File Systems Privilege Software
KuppingerCole

“The PowerBroker Management Suite is a formidable set of tools for administrators dealing with Microsoft-centric technologies.”

KuppingerCole
Tighter Security and Control Over Access and Permissions
Privilege Explorer offers a centralized view of enterprise access, ensuring that the right people have access to the right resources, minimizing the risk of data theft, security breaches or system attacks.
Instantly Drill Down to Roll Back Changes
Integration with the PowerBroker Management Suite enables administrators to instantly drill down on any privilege to find out how access to a resource was granted — and then click to roll back the change to return to the previous state with the appropriate access privileges set.
Powerful Reporting Means Easier Compliance
Reporting capabilities deliver the documentation and data needed to identify violations, and prove compliance to auditors and managers. Advanced filtering allows you to quickly target access reports to specific resources, users, groups, permissions and dates.
Strengthen Security Without Over-Extending Your IT Resources
By streamlining and automating reporting on directory permissions, Privilege Explorer lets you strengthen your data security and compliance strategy, without burdening your IT staff. Scheduled reporting enables administrators to run reports against the central database and automatically email them to administrators, security officers, and data owners.

AUDITING & REPORTING

  • Uncovers where an account or group has rights, ensuring they have the appropriate access to just those resources they need for their jobs.
  • Examines both object and group membership changes that affect access.
  • Tightens security and audit access management procedures.
  • Reveals the exposure of your sensitive information and intellectual property.
  • Performs second tier auditing to track the actions of privileged users.
  • Examines access changes to users and groups not only as the result of object access control changes, but also as the result of changing group memberships.

REMEDIATION

  • Drills down to reveal how access to a resource was granted.
  • Compares permissions over time with live and historical reporting, or displays current settings.
  • Uses capabilities not found in native auditing, including point-in-time and historical comparison and roll back.
  • Instantly roll back any unwanted changes through seamless integration with the PowerBroker Management Suite.
  • Isolates suspect activity quickly and performs root cause analysis using an interactive console to filter for specific users, permissions and resources.

Datasheet

PowerBroker Privilege Explorer for Active Directory and File Systems

PowerBroker Privilege Explorer for Active Directory and File Systems

Download this overview document containing capabilities, highlights and competitive advantages of PowerBroker Privilege Explorer for Active Directory. This tool automates the process of security analysis and reporting, providing a scalable and cost-eff ective way to manage network resources across the enterprise.

BeyondTrust Webcast: Darren Mar-Elia’s 4 Active Directory Change Scenarios to Track

8/20/2014

In our latest webcast, we joined Darren Mar-Elia, CTO at SDM Software, to discuss best practices for Active Directory (AD) change management. Here are some key takeaways from the presentation, followed by a link to a full-length video of the presentation. Mar-Elia kicks things off with a critical insight: that the best AD change management... more

Did you know? Continuous Protection feature

8/21/2013

Did you know that the continuous protection feature in the PowerBroker Management Suite is unique in the market?  You may have heard it referred to as continuous recovery or continuous backup. What is it? – It’s like the undo feature found in MS Word but for Active Directory (AD). PowerBroker Auditor for Active Directory provides... more

Did you know? Create custom audit views and reports with PowerBroker Auditor for Active Directory

7/31/2013

Did you know about the create custom audit views and reports feature in the PowerBroker Auditor for Active Directory solution?  Even though there are already around 200 built-in audit views that ship with the product organizations need to be able to target specific information for their environment and the task that is at hand. Needless... more

Did you know? – Native tool integration

5/29/2013

Did you know about the native tool integration feature in the PowerBroker Management Suite?  PowerBroker solution functionality is available through the native Microsoft administration tools referred to as Remote Server Administration Tools (RSAT).  These are the tools that administrators use on a day to day basis to manage their environment. What is it? – It’s... more

Restoring/Undeleting a GPO

2/24/2012

Have you ever needed to undelete or rollback a GPO, but realized you forgot to back it up or could not remember what changes were made to it? Well, we have had many customers with the same problem. That’s why BeyondTrust Recovery for Active Directory also supports group policy objects (GPO). When group policies are... more

10 Things You Should Know About PowerBroker Auditor for Active Directory

2/21/2012

Rapid installation and minimal training with no reliance on native auditing tools Unmatched scalability and performance (“Our typical traffic volume is more than 1.5 million events per day and Blackbird has scaled-up effortlessly,” Josh Munn, Senior Systems Administrator, The University of Mississippi Medical Center) Real-time collection and alerting for active directory and group policy changes... more

Active Directory Changes Got You Down?

2/17/2012

When active directory goes down, everyone notices. Users cannot log in, applications become unusable and organizations lose money. Let’s face it, even without malicious events, people still make mistakes. Although recovering from directory outages can be streamlined with point in time and continuous recovery solutions such as PowerBroker Recovery for Active Directory, it’s always less... more

See all PowerBroker Management Suite blog posts

VMware Plug-in for Retina

The industry's first and only vulnerability management solution directly integrated into vCenter.

DATASHEET VMWARE SURVEY Watch Video

Retina CS Enterprise Vulnerability Management

Delivers large-scale, cross-platform vulnerability assessment and remediation, with available configuration compliance, patch management and compliance reporting.

Learn More Request a Free Trial

Retina CS Enterprise Vulnerability Management

The Cofiguration Compliance Module can be purchased as an add-on to Retina CS, which delivers large-scale, cross-platform vulnerability assessment and remediation.

Learn More Request a Free Trial

Retina CS Enterprise Vulnerability Management

The Patch Management Module can be purchased as an add-on to Retina CS, which delivers large-scale, cross-platform vulnerability assessment and remediation.

Learn More Request a Free Trial

Retina CS Enterprise Vulnerability Management

The Regulatory Reporting Module can be purchased as an add-on to Retina CS, which delivers large-scale, cross-platform vulnerability assessment and remediation.

Learn More Request a Free Trial

Retina Network Security Scanner

Integrated network, web & virtual vulnerability assessment. Retina is the security industry’s most respected and industry-validated security scanner and serves as the engine for our vulnerability management solutions. There is no better option for securing your network from vulnerabilities.

Learn More Request a Free Trial

Retina Web Security Scanner

Rapidly and accurately scan large, complex web sites and web applications to tackle web-based vulnerabilities including cross-site scripting (XSS) and SQL injection.

Learn More Request a Free Trial

PowerBroker Event Vault

Automate and streamline the collection and management of standard Windows event log data and provide scalable and flexible centralized storage in the PowerBroker event database.

Learn More Request a Free Trial

PowerBroker Identity Services

Quickly and easily integrate your Linux and UNIX servers into your Active Directory infrastructure.

Learn More Request a Free Trial

PowerBroker Identity Services Open Edition

Available as a free and open source version of PowerBroker Identity Services, giving you the access and flexibility to tailor your Active Directory bridging project

Download Now

PowerBroker UNIX & Linux

Quickly and easily manage root access on UNIX and Linux servers, without ever disclosing the system password.

Learn More Request a Free Trial

PowerBroker for Windows

Implement least privilege for your Windows desktop environment, reducing attack surface and driving down costs.

Learn More Request a Free Trial

PowerBroker Auditor
for Active Directory

Track unauthorized changes to Active Directory and Group Policy configurations.

Learn More Request a Free Trial

PowerBroker Auditor
for Exchange

Tracks and reports all changes made to all Exchange Server configurations, groups, mailbox policies, information store changes, and permissions in a centralized audit log.

Learn More Request a Free Trial

PowerBroker Auditor
for File System

Enables tighter security and control over file system resources, including real-time tracking, interactive analysis, and flexible reporting on all key share, file, and folder changes.

Learn More Request a Free Trial

PowerBroker Auditor
for SQL Server

Monitor and review privileged user changes on SQL servers. Easily map your SQL activities with regulatory mandates such as GLBA, SOX, HIPAA, and PCI through consistent auditing and reporting.

Learn More Request a Free Trial

PowerBroker Privilege Explorer

Provides a centralized view of access and privileges, so you can be sure that users have access to the resources they need to do their jobs, and only those resources.

Learn More Request a Free Trial

PowerBroker Endpoint Protection Platform

Formerly known as "Blink", multi-layered security and attack prevention for windows desktops and servers.

Learn More Request a Free Trial

PowerBroker Recovery
for Active Directory

Advanced continuous data protection for Active Directory, providing unparalleled visibility and change control.

Learn More Request a Free Trial

PowerBroker Servers Enterprise

Combine the power of our UNIX/Linux root delegation and our AD bridging for an enterprise approach to server compliance

Learn More Request a Free Trial

PowerBroker Password Safe

Automate Password Management for Increased Security across your entire dynamic infrastructure.

Learn More Request a Free Trial

BeyondSaaS

A cloud-based, external vulnerability assessment solution that conducts fast, affordable security assessments of your public-facing network infrastructure and web applications.

Learn More Request a Free Trial

BeyondInsight

Merge privileged account management and vulnerability management solutions into a single, contextual lens through which to view and address user and asset risk.

Learn More Request a Free Trial

Retina Protection Agent

Close the security gap created by systems that can't be reached with remote vulnerability assessments alone with this lightweight agent for local vulnerability assessment, continuous zero-day vulnerability monitoring, and intrusion prevention.

Learn More

Configuration Compliance Module

This Retina CS add-on module defines and manages security policies to monitor compliance with industry and internally developed benchmarks such as Microsoft, NIST, USBCG, and DISA STIGs.

Learn More

Patch Management Module

This Retina CS add-on module seamlessly integrated, automated, agentless Windows patch management closes the loop on unpatched vulnerabilities.

Learn More

Regulatory Reporting Module

This Retina CS add-on module contains automated solutions to help navigate complex corporate policies, government regulations, and industry standards such as SOX, PCI, FISMA, and ISO.

Learn More

PowerBroker Management Suite

PowerBroker Privilege Explorer for Active Directory and File Systems is part of the PowerBroker Management Suite, which provides centralized real-time change auditing for Active Directory, File Servers, Exchange, and SQL, the ability to restore Active Directory objects or attributes, and helps to establish and enforce entitlements across the Windows infrastructure. Through simpler administration, IT organizations can mitigate the risks of unwanted changes and better understand user activity to meet compliance requirements.

Audit

Audit the who, what, where and when of changes in Active Directory, Exchange, File Systems and SQL, and alert to those changes, providing real-time visibility to address potential compliance concerns

Restore

Provide rollback and restore of any Active Directory changes or deletions, and backup and restore of Group Policy, protecting the business from downtime

Report

Deliver entitlement reporting, ensuring that users have access to the resources – and only those resources – they need to do their jobs

Extend

Extend throughout the Microsoft infrastructure, providing more capabilities than native tools and a unified view of changes across Exchange, Windows File Server, and SQL environments

Vulnerability Management

Identifying, prioritizing, remediating, and mitigating
computer and network vulnerabilities.

Privileged Account Management

Managing user authorization to prevent internal data
breaches and meet compliance regulations.

Fusing
PAM & VM For
Stronger IT Security