Active Directory Health Check – Windows Domain Security Review

If you run a Windows domain, Active Directory is the master key to your entire business. Very few small businesses have ever had it looked at.

The Active Directory Health Check reviews the domain configuration decisions that ransomware operators exploit to move from one infected desktop to every server you own. The community tools that do this are built for consultants; this returns a report an owner can read.

What it checks

• Membership of Domain Admins and other privileged groups — usually larger than anyone remembers
• Accounts that have not logged in for months but remain enabled
• Service accounts with excessive rights and passwords that never expire
• Domain password and lockout policy
• Delegation settings that let one compromised machine act as another
• Domain controller configuration and legacy protocol support
• Group Policy settings that weaken the whole domain in one line

Before you buy

This product only produces meaningful results on a computer joined to a Windows domain. On a standalone home or small-office PC with no domain, there is nothing for it to examine — if you are not sure whether you have a domain, you almost certainly do not, and the Account & Access Review is the right product for you instead.

What you get

• A written PDF report emailed back to you, typically within one business day.
• Every finding rated Critical / High / Medium / Low, with the attack path it enables described.
• A privileged-account inventory you can act on immediately.
• A prioritised remediation plan ordered by blast radius.
• Reporting built to CompTIA Security+ and PenTest+ practice standards.

Who it's for

Small businesses running a Windows domain with no full-time systems administrator, and IT generalists who inherited a domain someone else built.

Requirements

• Windows 10 or Windows 11, joined to the domain you want reviewed
• Run as administrator, with an account that can read directory objects
• About 10 minutes

What this is not

QuickScan is detection and advisory only. It reads directory information; it never changes an object, never resets a password, never exploits a weakness, and leaves nothing running behind it. It is not a certification, an audit or an attestation.

One-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.