Insights provided by the Overview Dashboard

The Overview dashboard provides a holistic view of service accounts and details related to the accounts.

Service Account overview

For the selected time period, the Service Account Activity Overview section, represented as a pie chart, provides a broad, statistical view of the number of service accounts that have engaged in activity and the number of service accounts that have not engaged in any activity. When you click any section in the pie chart, the corresponding accounts are displayed in the Service Accounts section.

Top accounts by activity

The Top Accounts by Activity is a graphical chart that displays the service accounts and the number of modifications the accounts have gone through, for the selected time period. The vertical axis shows the names of the service accounts and the horizontal axis displays the number of modifications made to a service account or the number of modifications the service account has made to the user objects of the Active Directory. A maximum of 10 top service accounts can be displayed.

When you click a bar, you will be directed to the Service Account Details dashboard and the selected service account is highlighted.

Service Account password expiration status

The Service Account Password Expiration Status section provides a snapshot of the password expiration status of all the service accounts of the domain. The status displayed is for the present time, irrespective of the time period you select. An overall view of the password expiration status in the domain helps you understand how many service accounts need attention for renewal of their passwords.

The pie chart categorizes and displays the service accounts as Expired, Expiring in 7 days, Expiring after 7 days and within 15 days, and Expiring after 15 days.

Service Accounts

The Service Accounts section displays a summary of all the service accounts in the domain for the selected period. This summary helps you in gaining a broad view of the account details. For each service account, the following details are displayed as part of the summary:

  • Account Name: The name of the service account.

  • Services: The number of services that run using the service account.

  • Modifications: The number of changes the service account has made to the objects of the Active Directory or the number of changes that have been made to the service account.

  • Password Status: Information on whether the service account password has expired, is still active, and so on. This information enables administrators to take timely actions on updating the passwords of the service accounts.

  • Password Expiration Date: The date when the password expires or has expired. This information along with the information on modifications helps administrators understand if a service account has not been in use for long and is at a risk of being compromised.

  • Email Notification: An option to notify the service account manager through email on the password expiration status of the service account.

There is also a provision to list a specific service account name along with its summary, hide or show the details for the service accounts that need to be displayed, and export the listed service accounts along with their details, hide or show the details for the service accounts that need to be displayed, and export the listed service accounts along with their details. When you click an Account Name, you will be directed to the Service Account Details dashboard.

Service Account details for monitoring

The Service Account Details window provides detailed insights into the service accounts. The following details are displayed:

  • The name and the manager of the service account.

  • The password expiration date and an option to notify the account manager on the password renewal action.

  • The password expiration date and an option to notify the account manager and other key members on the password renewal action.

  • The names of the services with which the service account is associated. This information helps in easily identifying which services need to be reconfigured whenever the service account password is updated.

  • All the changes done to the service account and the changes done by the service account are listed in the Changes Done To Service Account and Changes Done By Service Account tabs respectively. Every change is captured as a single event. Service account details are listed as Event Name, Initiator User Name, Target Data Container, Target Host Name, and Event Time.

  • On the click of an event in any of the tabs, a window appears which displays in-depth information about the modification that will help administrators determine if the change is of a suspicious nature and the account deserves attention. You can view the following details:

    • Overview: The Overview section provides a summary of the initiator of the change and a summary of the change, including the target of the change. It also displays what the change was and where was it implemented.

    • Delta: The Delta section provides a list of the attributes of the target that have been modified in the Active Directory, along with their original and modified values.

    • All Event Fields: The All Event Fields section provides a list of all the fields of the event, along with their values.

There is also a provision to list a specific event, hide or show the details for the events that need to be displayed, and export the listed events along with their details, hide or show the details for the events that need to be displayed, and export the listed events along with their details.