Specops Password Auditor

Additional features

Active Directory Auditing

Scans the Active Directory environment to gather information about user accounts, password policies, and related settings.

Breached Password Check

Compares user passwords against a large database of compromised passwords from known data breaches. This helps identify users using passwords already exposed to attackers.

Weak Password Detection

Analyzes passwords based on complexity rules and known weak password patterns to identify easily guessable or crackable passwords.

Stale/Inactive Account Detection

Identifies user accounts that have not been used for an extended period, especially privileged administrator accounts, which pose a security risk if compromised.

Password Policy Assessment

Evaluates the strength of existing password policies, including password length, complexity requirements, and password expiration settings.

Fine-Grained Password Policy Analysis

Analyses the fine grained password policy settings that can be set within active directory.

Compliance Scoring

Provides a score indicating how well the organization's password policies align with industry standards and regulatory requirements.

Interactive Reports

Presents audit results in an interactive format, making it easy to navigate and understand the identified vulnerabilities.

Executive Summary PDF Reports

Generates PDF reports that summarize the key findings of the audit, suitable for sharing with management and decision-makers. Reports are available in English, French, and German.

CSV Export

Allows exporting audit data in CSV format for further analysis or integration with other tools.

Minimum Password Length Check

Identifies user accounts that do not adhere to minimum password length requirements.

Administrator Account Review

Helps review administrator accounts and rights to support least privilege implementation.

Integration with Specops Password Policy

Can be used standalone or integrated with Specops Password Policy for enhanced password management and remediation.

Password Change Date Reports

Identifies users who have not changed their password since a specific date, aiding in password reset directives.

Password Expiration Reports

Provides reports on password expiration, helping to reduce password-related help desk calls.

Dormant Account Detection

Identifies user accounts that are dormant, stale or inactive.

Brute Force Attack Analysis

Measure the effectiveness of password policies against brute force attacks.