DC REPORTING / DASHBOARD
Directory security, at a glance
Compliance, identity posture and security activity across example.com.
Directory snapshot2026-10-22 16:18 UTC
Users55Latest snapshot
Enabled5091% of users
Stale · 90d6Enabled accounts
Never expire3Enabled accounts
Passwords >90d7Enabled accounts
Computers60Latest snapshot
GPOs12Latest snapshot
Groups20Latest snapshot
Open alerts386 critical
Security activity
Events per day · last 30 days
Remote access
VPN sessions per day · last 30 days
When your directory is active
Successful logons (4624) · weekday × UTC hour · last 30 days
0003060912151821
Fewer More · busiest hour 30 logons
Priority findings
Latest open critical alerts
Brute force
Critical2026-10-21 03:12 UTC · mira.quill
Password spraying
Critical2026-10-20 01:40 UTC · 198.51.100.21
Security log cleared
Critical2026-10-19 22:41 UTC · 10.24.1.42
Account probing
Critical2026-10-17 23:05 UTC · 198.51.100.22
Member added to privileged group
Critical2026-10-13 15:21 UTC · veya.quill
Compliance checks
19 checks computed from the latest snapshots and events from 2026-10-01 to 2026-10-22 · score = passing ÷ total
| Result | Area | Check | Target | Evidence |
|---|---|---|---|---|
| PASS | Password policy | Minimum password length | At least 12 characters | Domain policy requires 12 characters |
| PASS | Password policy | Password complexity | Enabled | Complexity requirement is enabled |
| PASS | Password policy | Maximum password age | 1–90 days | Passwords expire after 90 days |
| PASS | Lockout policy | Account lockout threshold | 1–5 attempts | Accounts lock after 5 failed attempts |
| FAIL | Lockout policy | Lockout duration | At least 30 minutes | Locked accounts stay locked 15 minutes |
| FAIL | Accounts | Stale enabled accounts | None | 6 of 50 enabled accounts without a logon in 90 days: elin.briar, mira.vale, orin.wren, sela.moss, tavi.quill and 1 more |
| FAIL | Accounts | Non-expiring passwords | None | 3 enabled accounts exempt from password expiry: lio.moss, tavi.wren, veya.quill |
| FAIL | Accounts | Expired passwords on enabled accounts | None | 7 enabled accounts with a password older than 90 days: dara.vale, kian.moss, lio.quill, mira.vale, neri.briar and 2 more |
| FAIL | Privileged access | Privileged account hygiene | None | 2 of 6 privileged members are disabled, stale, unknown or non-expiring: orin.wren (stale), veya.quill (password never expires) |
| PASS | Privileged access | Privileged membership size | 1–10 accounts | 6 distinct accounts hold privileged group membership: neri.vale, orin.quill, orin.wren, tavi.vale, veya.quill, dara.vale |
| FAIL | Devices | Patch reporting coverage | All computers | 58 of 60 computers report patch status; missing: LEX-APP-01, LEX-WS-055 |
| FAIL | Devices | Patch currency | At least 95% | 83.3% of computers have no missing updates; behind: LEX-WS-007, LEX-WS-014, LEX-WS-021, LEX-WS-028, LEX-WS-035 and 3 more |
| FAIL | Devices | Inactive computer objects | None | 1 computer not seen in 90 days: LEX-WS-033 |
| PASS | Infrastructure | Domain controller redundancy | At least 2 | 2 domain controllers in the latest snapshot: DC-EX-01, DC-EX-02 |
| PASS | Infrastructure | Security event collection | Events from every DC | DC-EX-01: 547 events; DC-EX-02: 463 events in period |
| PASS | Infrastructure | Inventory snapshot freshness | At most 2 days old | Latest directory snapshot 2026-10-22 16:18:00 UTC (0 days old) |
| FAIL | Audit integrity | Security log integrity | None | 1 security-log-cleared event (1102) in period: DC-EX-02 at 2026-10-19 22:41:00 |
| FAIL | Audit integrity | Audit policy stability | None | 1 audit-policy change (4719) in period |
| FAIL | Alerts | Critical alerts acknowledged | None open | 6 critical alerts raised up to 2026-10-22 remain unacknowledged: Brute force (2026-10-21), Password spraying (2026-10-20), Security log cleared (2026-10-19) and 3 more |