Active Administrator™ - Frequently Asked Questions

• We migrated to Active Directory and set up a load of delegated permissions, but now we don't know “who can do what”. How do we clean it all up?
  • This is a common problem. Native AD tools have the ability to establish delegated permissions, but no simple way to identify and report on those delegations. Active Administrator makes it easy to find assigned permissions and generate reports to begin the cleanup process. With Active Administrator you assign delegated permissions using Active Templates, which make it easy to track who can do what, and let you quickly revoke or edit delegations.


• Do I need to have a 2003 or 2008 Domain Controller? Will it work with Windows 2000? Does it support Windows Server 2008 and 2008 R2?
  • Active Administrator works great in Active Directory built on Windows Server 2000, 2003, 2008, 2008 R2, or any mixture of them. One important note is that to use the object-level Restore function you must have at least one Windows 2003 or 2008 Domain Controller on the domain.


• Is there a way to tell what the value of an attribute in AD was before the change was made?
  • Yes! Active Administrator collects all information regarding changes, including who made the change, when, where - and the before and after values. And with our real-time event viewer and formatted reports, you can accurately show those values for all attribute changes.


• What about built-in AD tools?
  • Windows comes with some AD management tools out of the box, but these tools are limited in functionality and management scope. This is the very reason Active Administrator was created – you can leverage your existing investment in Active Directory coupled with Active Administrator that provides advanced security administration capabilities, centralized auditing and alerting, delegation and permission management, Group Policy management and object-level AD recovery.


• I already use Microsoft Group Policy Management Console (GPMC) for my Group Policy Management. Why do I need Active Administrator?
  • Active Administrator offers a complete GPO management solution including offline GPO management, advanced RSoP modeling, GPO history and rollback, and auditing and reporting of all AD changes including Group Policies. For a more comprehensive comparison at the Group Policy Management features found in Active Administrator and GPMC, take a look at our Group Policy Management Comparison Matrix.


• Can I find out who changed what and when in AD? Even going back 12 months?
  • YES! Active Administrator maintains its own auditing database. You can go as far back as you want!


• Is there really an "undo" function for AD in Active Administrator?
  • Active Administrator’s recovery capability allows administrators to selectively recover deleted containers, users, groups, computers and other objects, and also to restore changed attributes. This essentially gives administrators an “undo” inadvertent deletions or modifications of all objects and even entire OUs. Additionally, the Group Policy History function allows for easy corrections to unwanted Group Policy changes.


• What formats does Active Administrator support for generating reports on Active Directory?
  • Active Administrator supports a wide variety of common formats for reports and includes the ability to save or email the reports as PDF, HTML, MHT, FTF, Excel, CSV, Text or Image format (BMP, GIF, JPG, EMF, WMF, PNG, TIFF).


• What is the Export Control Classification Number (ECCN) number for this product?
  • ECCN numbers for all ScriptLogic products are available from http://www.scriptlogic.com/company/export.asp

ScriptLogic Product Maintenance

• What do I get with Standard Support, Extended Support or Maintenance?
  • For a full statement of ScriptLogic’s Support and Maintenance offerings,  please click here

Active Administrator licensing

• For more information on Active Administrator licensing, see the Licensing FAQs page.