Microsoft Active Directory

Microsoft Active Directory version 2.5

Scorecard	Audience	Description
Active Idle Perpetual User Accounts	Operations	Active Idle Perpetual User Accounts displays the percentage of user accounts with an active status, set to never expire, and have not been logged into within the past threshold period.
Active Idle Perpetual User Accounts by Asset Scope	Operations	Active Idle Perpetual User Accounts displays the percentage of user accounts with an active status, set to never expire, and have not been logged into within the past threshold period.
Active Idle User Accounts	Operations	Active Idle User Accounts displays the percentage of active user accounts that have not been logged into within threshold.
Active Idle User Accounts by Asset Scope	Operations	Active Idle User Accounts displays the percentage of active user accounts that have not been logged into within threshold.
Active Perpetual User Accounts	Operations	Active Perpetual User Accounts displays the percentage of user accounts with an active status and are set to never expire.
Active Perpetual User Accounts by Asset Scope	Operations	Active Perpetual User Accounts displays the percentage of user accounts with an active status and are set to never expire.
Active User Accounts	Operations	Active User Accounts displays the percentage of user accounts with an active status.
Active User Accounts by Asset Scope	Operations	Active User Accounts displays the percentage of user accounts with an active status.
Change in Failed Login Attempts	Operations	Failed Login Attempts calculates the percentage of failed login attempts. The number of login attempts is a running total during the lifetime of the user account.
Change in Failed Login Attempts by Asset Scope	Operations	Failed Login Attempts calculates the percentage of failed login attempts. The number of login attempts is a running total during the lifetime of the user account.
Change in Successful Logins	Operations	This chart displays the number of successful logins. The bar chart represents the running total and the area chart represents the change in number of successful logins for the period. Time period is specified as the duration between metric runs.
Change in Successful Logins by Asset Scope	Operations	This chart displays the number of successful logins. The bar chart represents the running total and the area chart represents the change in number of successful logins for the period. Time period is specified as the duration between metric runs.
Failed Login Attempts	Operations	Failed Login Attempts calculates the percentage of failed login attempts. The number of login attempts is a running total during the lifetime of the user account.
Failed Login Attempts by Asset Scope	Operations	Failed Login Attempts calculates the percentage of failed login attempts. The number of login attempts is a running total during the lifetime of the user account.
Manual Password Reset	Operations	The Manual Password Reset scorecard evaluates how well the organization manually resets passwords.
Manual Password Reset by Asset Scope	Operations	The Manual Password Reset scorecard evaluates how well the organization manually resets passwords.
Manual Password Reset Completed Within Policy	Operations	Manual Password Reset Completed Within Policy displays the percentage of completed manual password reset requests.
Manual Password Reset Completed Within Policy by Asset Scope	Operations	Manual Password Reset Completed Within Policy displays the percentage of completed manual password reset requests.
Password Age Statistics	Operations	Password Age Statistics displays trended metrics results for the average age of account passwords.
Password Age Statistics by Asset Scope	Operations	Password Age Statistics displays trended metrics results for the average age of account passwords.
Password Auditing	Operations	Password Auditing illustrates account password strength. The scorecard displays trended metrics results for the percentage of accounts with uncracked passwords.
Password Auditing by Asset Scope	Operations	Password Auditing illustrates account password strength. The scorecard displays trended metrics results for the percentage of accounts with uncracked passwords.
Password Hygiene	Operations	Password Hygiene Statistics illustrates password compliance and password strength. The scorecard presents trended metrics results for the percentage of accounts which have passwords, and for the percentage of accounts with uncracked passwords.
Password Hygiene by Asset Scope	Operations	Password Hygiene Statistics illustrates password compliance and password strength. The scorecard presents trended metrics results for the percentage of accounts which have passwords, and for the percentage of accounts with uncracked passwords.
Password User Accounts	Operations	Password User Accounts displays the percentage of user accounts with non-blank passwords.
Password User Accounts by Asset Scope	Operations	Password User Accounts displays the percentage of user accounts with non-blank passwords.
PCI Requirement 7	Risk Management	This scorecard demonstrates compliance with PCI Data Security Standard Requirement 7. The scorecard presents trended metrics results for account provisioning and deprovisioning activity, idle accounts, and account status.
PCI Requirement 8	Risk Management	This scorecard demonstrates compliance with PCI Data Security Standard Requirement 8. The scorecard presents trended metrics results for accounts with passwords, password strength, password age, and failed logins.
Remaining Time Until Active User Accounts Expire	Operations	Remaining Time Until Active User Accounts Expire calculates statistics on the number of days until an active user account expires. Only user accounts with an active status and expiring account expires flag are considered.
Remaining Time Until Active User Accounts Expire by Asset Scope	Operations	Remaining Time Until Active User Accounts Expire calculates statistics on the number of days until an active user account expires. Only user accounts with an active status and expiring account expires flag are considered.
Successful Logins	Operations	Successful Login displays the percentage in the number of successful logins. The number of login attempts is a running total for the lifetime of the user account.
Successful Logins by Asset Scope	Operations	Successful Login displays the percentage in the number of successful logins. The number of login attempts is a running total for the lifetime of the user account.
Time Between Failed Login Attempts	Operations	Time Between Failed Logins Attempts displays statistics on the number of days between failed login attempts.
Time Between Failed Logins Attempts by Asset Scope	Operations	Time Between Failed Logins Attempts displays statistics on the number of days between failed login attempts.
Time Between Successful Logins	Operations	Time Between Successful Logins examines the ability of the organization to ensure secure logins. It examines the distribution of failed and successful login attempts, so that the organization can determine if user-authentication controls are too restrictive, if there have been unauthorized access attempts, and if users have been diligent in safeguarding their sessions.
Time Between Successful Logins by Asset Scope	Operations	Time Between Successful Logins examines the ability of the organization to ensure secure logins. It examines the distribution of failed and successful login attempts, so that the organization can determine if user-authentication controls are too restrictive, if there have been unauthorized access attempts, and if users have been diligent in safeguarding their sessions.
Time to Complete Deprovision User Account Requests	Operations	Time to Complete User Account Deprovision Requests displays statistics on the number of days to complete a user account deprovision request. Time to complete is measured from when the ticket was created to when the ticket is closed in days. Tickets with an open status are not considered in this calculation.
Time to Complete Deprovision User Account Requests by Asset Scope	Operations	Time to Complete User Account Deprovision Requests by Asset Scope displays statistics on the number of days to complete a user account deprovision request. Time to complete is measured from when the ticket was created to when the ticket is closed in days. Tickets with an open status are not considered in this calculation.
Time to Complete Manual Password Reset	Operations	Time to Complete Manual Password Reset displays statistics on the amount of time to complete password reset requests.
Time to Complete Manual Password Reset by Asset Scope	Operations	Time to Complete Manual Password Reset displays statistics on the amount of time to complete password reset requests.
Time to Complete User Account Provision Requests	Operations	Time to Complete User Account Provision Requests displays statistics on the number of days to complete a user account provision request. Time to complete is measured from when the ticket was created to when the ticket is closed in days. Tickets with an open status are not considered in this calculation.
Time to Complete User Account Provision Requests by Asset Scope	Operations	Time to Complete User Account Provision Requests by Asset Scope displays statistics on the number of days to complete a user account provision request. Time to complete is measured from when the ticket was created to when the ticket is closed in days. Tickets with an open status are not considered in this calculation.
User Access Control Policies	Operations	The User Access Control Policies scorecard examines how well the organization provisions and deprovisions accounts. This scorecard focuses on the attainment of two organizational policies: percentage of tickets completed within policy and the time to complete requests. This information allows the organization to assess its user access control process in order to identify areas for improvement.
User Access Control Policies by Asset Scope	Operations	The User Access Control Policies by Asset Scope scorecard examines how well the organization provisions and deprovisions accounts. This scorecard focuses on the attainment of two organizational policies: percentage of tickets completed within policy and the time to complete requests. This information allows the organization to assess its user access control process in order to identify areas for improvement.
User Access Control Rollup	Executive	This scorecard illustrates the organization's overall performance in user access control by examining the following key performance indicators: User Account Deprovision Requests Closed Within Policy, User Account Provision Requests Closed Within Policy, and User Account Provision Requests Closed Within Policy.
User Access Control Rollup By Asset Scope	Executive	This scorecard illustrates the organization's overall performance in user access control by examining the following key performance indicators: User Account Deprovision Requests Closed Within Policy, User Account Provision Requests Closed Within Policy, and User Account Provision Requests Closed Within Policy.
User Account Deprovision Requests Closed Within Policy	Operations	User Account Deprovision Requests Closed Within Policy displays the percentage of deprovision requests that were completed within policy.
User Account Deprovision Requests Closed Within Policy by Asset Scope	Operations	User Account Deprovision Requests Closed Within Policy by Asset Scope displays the percentage of deprovision requests that were completed within policy.
User Account Password Rollup	Executive	This scorecard illustrates the organization's overall performance in password management by examining the following key performance indicators: User Account With Passwords, Password Age Policy, and Strong Passwords.
User Account Password Rollup By Asset Scope	Executive	This scorecard illustrates the organization's overall performance in password management by examining the following key performance indicators: User Account With Passwords, Password Age Policy, and Strong Passwords.
User Account Provision Requests Closed Within Policy	Operations	User Account Provision Requests Closed Within Policy displays the percentage of account provision requests in which the ticket was completed within policy.
User Account Provision Requests Closed Within Policy by Asset Scope	Operations	User Account Provision Requests Closed Within Policy by Asset Scope displays the percentage of account provision requests in which the ticket was completed within policy.
User Account Rollup By Asset Scope	Executive	This scorecard illustrates the organization's overall performance in user account management by examining the following key performance indicators: Active User Accounts, Active User Accounts, Active User Accounts, and Active User Accounts.
User Accounts	Operations	User Account Statistics displays trended statistics for user account management activity. This scorecard presents metrics results for percentage of active accounts, average time to account expiration, and the percentage of idle and perpetual accounts.
User Accounts by Asset Scope	Operations	User Account Statistics displays trended statistics for user account management activity. This scorecard presents metrics results for percentage of active accounts, average time to account expiration, and the percentage of idle and perpetual accounts.
User Accounts Not Compliant to Password Age Policy	Operations	Lists active user accounts in which the password is not compliant to the password age policy. According to the password age policy, users must change their password within a given threshold period of time.
User Accounts Rollup	Executive	This scorecard illustrates the organization's overall performance in user account management by examining the following key performance indicators: Active User Accounts, Active User Accounts, Active User Accounts, and Active User Accounts.
User Accounts with the Most Number of Failed Logins Attempts	Operations	User Accounts with the Most Number of Failed Logins Attempts provides a list of user accounts with the most number of failed login attempts. The number of failed login attempts is a running total for the whole lifetime of the user account.
User Groups	Operations	The User Groups scorecard examines the volume, types, and demographics of user groups, and how well the organization is managing groups within its directory services system.
User Groups with Most Number of Active Idle Perpetual User Accounts	Operations	User Groups with Most Number of Active Idle Perpetual User Accounts lists the ten user groups with the highest number of idle perpetual accounts. An account is considered idle perpetual if the account status flag is set to active, the account expires flag is set to never expire, and the account has not been accessed within the past threshold number of days.
User Groups With Most Number of Successful Logins	Operations	User Groups With Most Number of Successful Logins lists the top user groups with the number of successful logins that occurred during the entire existence of the user group.
User Groups With Most Number of User Active Accounts	Operations	This chart displays the user groups with the most number of active user accounts. An user account is considered active if the account status flag is set to active.
User Group to User Account Ratio	Operations	User Group to User Account Ratio displays the average number of groups a user account is affiliated with.
User Group to User Account Ratio by Asset Scope	Operations	User Group to User Account Ratio displays the average number of groups a user account is affiliated with.
User Login Activity	Operations	Login Activity displays statistics for user login activity and login frequency. This scorecard presents trended metrics results for volume and latency of successful and failed login attempts.
User Login Activity by Asset Scope	Operations	Login Activity displays statistics for user login activity and login frequency. This scorecard presents trended metrics results for volume and latency of successful and failed login attempts.
User Login Activity Rollup	Executive	This scorecard illustrates the organization's overall performance in user login activity by examining the following key performance indicators: Successful Login Latency, Failed Login, and Successful Login.
User Login Activity Rollup By Asset Scope	Executive	This scorecard illustrates the organization's overall performance in user login activity by examining the following key performance indicators: Successful Login Latency, Failed Login, and Successful Login.

Measure, Share, Compare.

Microsoft Active Directory version 2.5

Do it...

Tell me...