Looking for a RSAT tool that integrates NTP with ADUC

Products Threat Prevention Ideas
,
1

What is a one sentence summary of your feature request?

Product Idea: Looking for a RSAT tool that integrates NTP with ADUC (active directory users and computers) where you right click on an object and you could then see options to find the activity details for that object.

Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.

The quest version of this product has a ADUC RSAT tool that allow you to put back the specific recorded data (e.g. account changes) for a AD object via ADUC.
This IMO was a much better way of interrogating and ad object rather than the methodology currently in Threat Prevention. The investigation part is a negative element of the product. It is superior in many way to the quest tool, bar this area.
This would also allow you to grant access to people to perform investigations but not have access to the console itself

How do you currently solve the challenges you have by not having this feature?

Using the default way provided by the tool which is slow and unwieldy if you have many types of jobs setup

1 Like
2

Hi @will.northey,

This is a great idea, Netwrix Recovery for Active Directory has a feature which integrates with NTP data and can view object history/changes even restore previous changes within ADUC via RSAT Extension. Might be worth a look with your Netwrix team. You get what you are describing plus AD backup tool.

Hopefully this helps!

2 Likes
3

Hi Will,

As Justin said, we have Identity Recovery that delivers this integration and has the ability to rollback the activity that has occurred on top of it.

This is something we can explore in the future, as we consolidate product features and experiences under our platform, but today NTP does not collect extended information about the AD objects nor store the activity in a relationship to those objects within the database.

Once we get this functionality under one platform umbrella, we can investigate exposing the activity tied to an AD object via MMC snap-in, without requiring owning our Recovery solution.

1 Like