Active Roles 8.1.3 - Administration Guide

User account list: Lists the Active Directory domain user accounts held in a given domain or container (Organizational Unit).
User account options: Lists Active Directory domain user accounts along with information about the state of the account options such as User must change password at next logon and Password never expires.
Password age information: Lists Active Directory domain user accounts along with information about the account’s password age. For each listed account, its password age is calculated using the pwdLastSet attribute of the account. The password age information helps determine when the user last changed their password.
Bad password information: Lists Active Directory domain user accounts along with information about the number of times the user tried to log on to the account using an incorrect password and the last time the user tried to log on using an incorrect password.

Active Directory Assessment/Users/Exchange

Mailbox information by user: Lists Active Directory user accounts along with information on whether the user account is mailbox-enabled (has an Exchange mailbox), allowing you to examine the user’s mailbox-related information in detail.
Email delivery restrictions: Lists Exchange mailbox-enabled user accounts along with information on mailbox delivery restrictions (such as the maximum size of incoming and outgoing messages for the mailbox), and from whom the mailbox can or cannot receive email.
Email delivery options: Lists Exchange mailbox-enabled user accounts along with information on mailbox delivery options (such as who is allowed to send messages on behalf of the mailbox user, the forwarding address for messages addressed to the mailbox, and the maximum number of recipients to whom the mailbox user can send a message).

Active Directory Assessment/Users/Obsolete Accounts

Disabled user accounts: Lists Active Directory domain user accounts that are currently disabled, and allows you to examine each account in detail.
Expired user accounts: Lists Active Directory domain user accounts that are past their expiration date, and allows you to examine each account in detail.
Inactive user accounts: Lists Active Directory domain user accounts that have not been used to log on within a given time period, and allows you to examine each account in detail.
Locked user accounts: Lists Active Directory domain user accounts that are currently locked out due to a number of failed logon attempts, and allows you to examine each account in detail.
User accounts with expired password: Lists Active Directory domain user accounts with passwords past their expiration date, and allows you to examine each account in detail.
Deprovisioned user accounts: Lists Active Directory domain user accounts that have been deprovisioned by Active Roles, and allows you to examine each account in detail.
All discontinued user accounts: Lists Active Directory domain user accounts that are not in use for whatever reason (such as accounts that are disabled, expired, locked, deprovisioned, or accounts with expired passwords), and allows you to examine each account in detail.

Active Directory Assessment/Users/Miscellaneous Information

Users with specified properties: Lists Active Directory domain user accounts that have the properties you specify, and allows you to examine each account in detail.
User profile information: Lists Active Directory domain user accounts, along with information on their profile settings (such as the path to the user’s profile, the name of the logon script, and the path to the user’s home folder).
Objects managed by user: Lists Active Directory domain user accounts, along with information about their managed objects. For a given account, the list of managed objects contains the objects whose Managed By property specifies that account.
Personnel Hierarchy: Lists Active Directory domain user accounts, along with information about their manager and subordinates. The manager ID is retrieved from the account’s Manager property. The list of subordinates is based on the Direct Reports property.