Jacobs IT Solutions
AD Access Review · v0.2.0 internal pilot

Prepare your next
AD account review.
Start with a clear package.

Bring account status, group relationships and review indicators into one dated report. Use the included worksheet to record the human decisions that follow.

Explore the sample reportSee if it fits your review

The sample uses fictional accounts. The toolkit is not yet available for public download or purchase.

Current stage: original full pilot package tested in an isolated AD lab · 90 automated checks pass per PowerShell engine · independent feedback and release preparation next.
Implemented in the internal pilot

From directory data to review work.

A focused package for reviewing user accounts and collected group relationships in one on-premises AD domain.

01 / UNDERSTAND

Inspect the account context.

Review account status, configurable inactivity indicators, and direct, primary and nested group relationships. Selected privileged-group paths are visible.

02 / RECORD

Keep the review together.

A dated HTML summary, eight CSV exports, structured JSON and a reviewer worksheet give the review a consistent starting format.

03 / CHECK

See failures and file changes.

Guided setup and local checks help explain prerequisites. Collection gaps remain visible, and file hashes help detect changes against the preserved manifest.

The intended workflow

Collect. Review.
Record the decision.

Work locally in an environment you administer. The pilot writes report files and performs directory reads; it does not modify AD accounts.

Read the account-review guide →
The worksheet supports the review.

Owners, approvals and any directory changes remain part of your own process. The toolkit does not route approvals or revoke access.

  1. Check the scope.

    Confirm the domain, read permissions, required module, output location and the review's purpose before collection.

  2. Inspect the report.

    Check coverage and collection issues before relying on account indicators or selected group relationships.

  3. Record a human decision.

    Verify the original evidence first, then make a separate worksheet copy outside the evidence folder before editing. Record an owner, reviewer, decision, reason, date and ticket reference.

  4. Keep the supporting records.

    Preserve the original output and retain approvals and evidence of any separately authorized changes.

Know the scope

Is this the review you need?

A potential fit

  • You administer one on-premises AD domain.
  • You regularly prepare user-account and group reviews.
  • You want local reports and a worksheet for human review.
  • You can use an approved PowerShell tool with documented prerequisites.

Outside this pilot

  • Entra ID, Microsoft 365 and other applications.
  • All effective permissions or administrative access paths.
  • Automated approval routing or access removal.
  • Computer accounts, managed service accounts and multi-domain consolidation.
Live AD lab testing has passed.

The original full pilot package ran in one isolated Windows Server 2025 AD lab with Windows PowerShell 5.1 and an ordinary, non-administrator reader: 20 package/failure checks passed and 50 directory comparisons were repeated successfully. Broader compatibility and three historical-login-timestamp cases remain open. Live collection targets Windows PowerShell 5.1 with Microsoft's ActiveDirectory module. See the completed validation and remaining release work →

Latest development update · October 18, 2026

A tested pilot package.
A clearer path to release.

COMPLETED / LAB

Ordinary-reader validation

Live AD collection, safe output, expected coverage gaps and controlled failure cases passed in the isolated lab. Five report manifests were independently checked.

PREPARED / HANDOFF

A guided first session

Updated quick-start instructions explain collection status and copying the worksheet before editing. A short feedback form and repeatable private tester package are prepared.

NEXT / VALIDATION

Feedback and wider coverage

Independent first-use testing, broader compatibility, report wording refinements, and final distribution and commercial decisions remain before release.

Read the full progress update

Testing covers the original full pilot package in one lab. Independent first-use acceptance and broader compatibility checks remain open.

Before release

A few practical answers.

Can I buy or download the toolkit today?

No. AD Access Review is an internal pilot. You can inspect the synthetic sample and use the free review-preparation guide and blank templates. A toolkit download, price and purchase link will follow the remaining validation and release preparation. Updated first-session guidance and tester feedback materials are prepared; independent first-use acceptance is still ahead.

Does an inactivity flag mean an account should be disabled?

No. Replicated logon timestamps can be delayed or missing. Service accounts and emergency accounts need context. The indicators prompt a human review; they do not authorize removal.

Will the pilot upload my directory information?

The pilot writes local report files and implements no vendor-upload or telemetry workflow. Protect those files under your organization's access and retention rules.

Does a completed collection prove a successful audit?

No. Collection status describes the requested queries and modeled relationships within the stated scope. It does not establish security, compliance or completion of the human review. File hashes also do not authenticate an unsigned manifest.

Do I need to schedule a call?

No call is required to inspect the sample or ask a product question. Our direction is documented, self-service software with product questions by email.