Skip to main content

3.OUs > AD_OUPermissions Job

The AD_OUPermissions job reports on all Active Directory permissions and ownership applied to organizational unit (OU) objects within the targeted domains.

3.OUs Job Group in the Jobs Tree

The AD_OUPermissions job is located in the 3.OUs job group.

Analysis Tasks for the AD_OUPermissions Job​

Navigate to the Active Directory Permissions Analyzer > 3.OUs > AD_OUPermissions > Configure node and select Analysis to view the analysis tasks.

CAUTION: Do not modify or deselect the selected analysis tasks. The analysis tasks are preconfigured for this job.

Analysis Tasks for the AD_OUPermissions Job

The default analysis tasks are:

  • List OU permissions – Creates the SA_AD_OUPermissions_Details table accessible under the job’s Results node
  • Summarize OU permissions – Creates an interim processing table in the database for use by downstream analysis and report generation
  • Shadow Access OU Paths – Calculates the object location and permissions for shadow access
  • OU Ownership – Lists the owners of each OU and determines if they are a non-standard owner. Principals that are not administrators are considered non-standard owners of OU objects. Creates the SA_AD_OUOwnership_Details table accessible under the job’s Results node.
  • OU Ownership Summary – Summarizes owner type by domain

In addition to the tables and views created by the analysis tasks, the AD_OUPermissions job produces the following pre-configured reports.

ReportDescriptionDefault TagsReport Elements
OU OwnershipThis report highlights instances where Active Directory OU objects are owned by non admin principals. This information is summarized at the domain level.NoneThis report is comprised of two elements: - Stacked Bar Chart – Displays a summary of user ownership by domain - Table – Provides details of non-standard ownership
OU PermissionsThis report highlights instances where permissions are applied to Active Directory organizational units. This information is summarized at the domain and enterprise levels.NoneThis report is comprised of three elements: - Bar Chart – Displays OU permissions by domain - Pie Chart – Displays OU permissions by type - Table – Provides details on OU permissions