Users and groups report
Background / Value
The user and group report shows all users and groups in AD and some of their properties and attributes.
Two key factors shown in this view are the Kerberos token and last logon timestamp. The latter shows you the last login of the AD accounts on your network, across all domain controllers.
The size of the Kerberos token is an expression of the number of group memberships. Many group memberships indicate the possibility of excessive and / or redundant access rights. If the maximum size of 64KB is exceeded, it is no longer possible for the user to log into the network.
In addition the following information is also displayed:
- Account expiry date
- Password expires yes/no
- Admin account yes/no
Displays direct and indirect group membership count as well as group scope (local, global, universal)