Skip to main content

5.Open Access > AD_OpenAccess Job

The AD_OpenAccess Job reports on all Active Directory permissions granting open access within the targeted domains. Open Access can be defined as access granted to security principals such as: Domain Users, Authenticated Users, and Everyone.

5.Open Access Job Group in the Jobs Tree

The AD_OpenAccess Job is located in the 5.Open Access Job Group.

Analysis Tasks for the AD_OpenAccess Job

Navigate to the Active Directory Permissions Analyzer > 5.Open Access > AD_OpenAccess > Configure node and select Analysis to view the analysis tasks.

warning

Do not modify or deselect the selected analysis tasks. The analysis tasks are preconfigured for this job.

Analysis Tasks for the AD_OpenAccess Job

The default analysis tasks are:

  • Determine open access – Creates the SA_AD_OpenAccess_Details table accessible under the job’s Results node
  • Summarize open access by domain – Creates an interim processing table in the database for use by downstream analysis and report generation

In addition to the tables and views created by the analysis tasks, the AD_OpenAccess Job produces the following pre-configured report.

ReportDescriptionDefault TagsReport Elements
Open Access by DomainThis report highlights instances of open access on AD objects, and summarizes open access by domain.NoneThis report is comprised of three elements:
  • Bar Chart – Displays open access by domain
  • Table – Provides details on open access
  • Table – Provides details on open access by domain