Concrete Recommendations
for Enhanced IT Security

Analysis & KPIs

• User Accounts
• Active vs. Disabled Accounts
• Active Status Unknown
• Users w/ Logon Activity
• User Logon Activity Ratio
• Unused User Accounts
• New User Accounts (30 days)
• Deleted User Accounts (30 days)
• SSH Accounts
• Domains
• Largest Domains (Users)
• Domains with min password length shorter than 8 characters
• Domains that do not enforce complex passwords
• Local vs. Domain users
• Local Users Changes (30 days)
• Guest Accounts
• Inactive Users (90 days)
• Unused Accounts Ratio
• Failed Login Attempts (30 days)
• Users w/ Weak Passwords (< 8 chars.)
• User Accounts w/ Expired Passwords
• Users w/ Password Not Required
• Password Must Be Set Next Login
• Active AD Domain Administrators
• Indirect Administrator Member
• Users w/ Administrative Role

• New AD Domain Administrators (30 days)
• Most frequent failed logins
• Microsoft Entra ID Sign In Locations
• Windows Kerberos Delegation
• Test Accounts
• Users w/ Logon Scripts
• Empty user groups in the Active Directory
• Empty groups in Google Workspace
• Expired User Accounts
• Expired user accounts still have a registered email
• User Accounts That Have Been Locked
• User accounts not logged in for six months
• Managers
• User Accounts without a Manager
• Groups
• Unchanged Groups (3 years)
• Group Membership Changes (30 days)
• New Groups (30 days)
• AD Primary Groups
• Members of Critical Admin Groups
• Top 5: User Group Memberships
• AD Organizational Units
• Empty Organizational Units
• Largest AD OU’s
• Empty OUs Ratio
• Active Directory: Group Policies
• New Group Policies (30 days)

Dokumentation

• Active Directory: Active Users
• Active Directory: Changes to Script Paths (30 Days)
• Active Directory: Computers
• Active Directory: Domain Administrators
• Active Directory: Domain User Documentation
• Active Directory: Empty Organizational Units
• Active Directory: Group Policies
• Active Directory: Group Policies Created Last 30 Days
• Active Directory: Groups
• Active Directory: Groups Critical for Administrators
• Active Directory: Inactive Clients
• Active Directory: Inactive Machines
• Active Directory: Inactive Users
• Active Directory: Inactive Users
• Active Directory: Modified Users
• Active Directory: New Domain Administrators
• Active Directory: New Users
• Active Directory: Organizational Units
• Active Directory: UAC Flags TRUSTED_FOR_DELEGATION
• Active Directory: Unchanged Groups
• Active Directory: User Account Primary Group Overview
• Active Directory: User Accounts with Short Password Length
• Active Directory: User Accounts Without a Manager
• Active Directory: Users & Password Expiry
• Active Directory: Users & Script Paths
• Active Directory: Users with Failed Login Attempts
• Active Directory: Users with Failed Login Attempts (30 Days)
• Azure AD Connect Settings
• Changes to the number of Domain User Accounts
• Changes to the number of Local User Accounts
• Domain Controller Documentation
• Domain Overview
• Google Workspace: Groups
• Google Workspace: Inactive User
• Google Workspace: New Users
• Google Workspace: Organizational Units

• Google Workspace: Suspended Users
• Google Workspace: User Accounts
• Google Workspace: User Activity
• Google Workspace: Users with Admin Privileges
• Group Policy Links
• Inactive Users with Licenses – 60 Days
• Jamf: Local Users
• Local User Accounts
• Microsoft Entra ID User Activity
• Microsoft Entra ID: Active Guest Users
• Microsoft Entra ID: Disabled User Accounts
• Unlinked Group Policies
• Unused Licenses
• User Documentation: Administrator Directory Roles
• User Documentation: Deleted User Accounts
• User Documentation: Domain & Password Settings
• User Documentation: Enabled User Accounts With No Authentication (90 days)
• User Documentation: Group Membership Changes 30 Days
• User Documentation: Group Memberships
• User Documentation: Groups
• User Documentation: Guest Accounts
• User Documentation: Indirect Administrator Membership
• User Documentation: Microsoft Entra ID Last Logon Distribution
• User Documentation: New Groups Last 30 days
• User Documentation: Password Settings
• User Documentation: Potentially Unused User Accounts
• User Documentation: SSH Accounts
• User Documentation: Status Unknown
• User Documentation: Test Users
• Users & Primary Devices
• Users (Disabled) – Active Directory
• Users – Adobe
• Users with Assigned License Plans – Adobe
• Users with Assigned Licenses
• Users with Microsoft Teams Licenses

Datakällor

• Local user accounts from both Windows & Linux OS
• Active Directory
• Microsoft Entra ID
• Google Workspace
• Adobe
• SCCM
• Oracle DB

Learn more about vScope’s Integrations

Assets in the report

• User Accounts
• Groups
• Domains
• Organizational units
• Group Policies