AD Permissions Reporter 1.1

AD Permissions Reporter is a Windows utility for Microsoft Active Directory that inventories and reports permissions across directory objects. It enumerates access control lists (ACLs) on OUs, users, groups, computers, and other containers, presenting inherited versus explicit access in a readable, audit-ready format. The tool resolves nested group memberships to show effective access for individual users, helping you validate delegation, locate over‑permissioned accounts, and spot orphaned SIDs. Reports can be filtered by object, principal, right, or scope and exported for compliance and documentation. Typical uses include least‑privilege reviews, preparing for security assessments, and documenting administrative boundaries. It performs read‑only scans and generally requires only standard directory read access.

Key capabilities:

• Clear visibility into who can do what across Active Directory
• Inherited vs. explicit permissions with ACE-level detail
• Effective access calculation through nested groups
• Flexible filtering by OU, security principal, permission, or inheritance
• Export to common formats (such as CSV and HTML) for audit trails
• Identification of stale or excessive access and orphaned SIDs

AD Permissions Reporter is developed by Cjwdev and is used by 1 user of Software Informer. The most popular versions of this product among our users are: 1.0 and 1.1. The name of the program executable file is ADPermissionsReporter.exe.