Aelita's Enterprise Suite is one of the best third-party tools for doing this sort of thing. Not only can you audit the status of AD objects, but take corrective action immediately: modify users, groups, permissions, shares, and perform changes either individually or en masse. The program has one main drawback -- the different tools in the suite are not integrated -- but it also allows you to undo your work, which is in itself extremely valuable.
Dig deeper on Microsoft Active Directory Tools and Troubleshooting
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.