X-Access: know who can access what, and prove it
Active Directory administration, access requests and audit evidence in one product, so IT works faster and auditors get answers without a spreadsheet.
XT
XfameTech team
3 min read
Access questions arrive from every side. The help desk needs a password reset now, a manager needs a new hire set up by Monday, and an auditor wants to know who could open the finance share last quarter. X-Access answers all three from one place.
Everyday AD work, done safely
- Delegated tasks. Reset, unlock, enable, move and change groups in seconds. Each help desk user is limited to the OUs they look after.
- Joiners, movers and leavers. Role templates, mirror user and bulk CSV with a preview. Offboarding is one step that disables the account, removes its groups and moves it.
- Requests with approval. Staff ask for access and an approver decides. X-Access makes the change in AD and records who asked, who approved and what changed.
See who has access to what
- Effective access. Scan file share permissions and see each person's access, directly or through which group.
- Reviews by data owners. Business managers confirm or revoke access to their data. That is the evidence auditors ask for under SOX, ISO 27001 and PCI DSS.
- Risk you can explain. Every account gets a risk score with its reasons. Alerts fire when someone joins Domain Admins or an account appears outside the process.
Evidence without the spreadsheet
- Complete audit trail. Every change with who, when, IP address and before and after values, including changes made in AD outside X-Access.
- Reports and compliance checks. Stale accounts, old passwords and privileged members in CSV or PDF, emailed on a schedule, with SOX, HIPAA, PCI DSS and GDPR checks.
- Backup, restore and self-service. Daily AD snapshots restore an account's attributes and lost groups. Staff reset their own Windows password with an emailed code.
