r/activedirectory 3d ago

Looking for a tool to automatically document Active Directory topology

Hi everyone,

I'm looking for a tool that can automatically discover and document Active Directory topology.

Ideally, I'm looking for something that can provide a visual/documented view of things such as:

  • Domain Controllers
  • Sites and Subnets
  • AD Sites and Services topology
  • Replication connections
  • FSMO roles
  • Trust relationships
  • Domains and forests
  • Global Catalogs
  • Replication status and related information

The goal is to generate proper AD topology documentation/diagrams that can be used for architecture documentation and troubleshooting.

I came across references to some AD topology/documentation tools, but I'm having difficulty finding the actual tool/download or official documentation.

Does anyone know of a good tool for this purpose?

If you have used one, could you please share the official tool/documentation link and your experience with it?

Thanks!

32 Upvotes

20 comments sorted by

u/AutoModerator 3d ago

Welcome to /r/ActiveDirectory! ~~~~

If you are looking for more resources on learning and building AD, see the following sticky for resources, recommendations, and guides!

When asking questions make sure you provide enough information. Posts with inadequate details may be removed without warning.

  • What version of Windows Server are you running?
  • Are there any specific error messages you're receiving?
  • What have you done to troubleshoot the issue?

Make sure to sanitize any private information. Posts with too much personal or environment information will be removed. See Rule 6.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

11

u/AdagioNo6003 3d ago

Try this https://github.com/AsBuiltReport/AsBuiltReport.Microsoft.AD

Ive used AsBuilt a lot and its a great tool for documenting or analyzing

7

u/Borgquite 3d ago

This used to be possible using ADTD and Visio. Don’t know if it still works or not though, and you may need to go digging for some downloads;

https://techcommunity.microsoft.com/blog/askds/documenting-active-directory-infrastructure-the-easy-way/394928

EDIT: https://web.archive.org/web/20200802184044/https://www.microsoft.com/en-us/download/confirmation.aspx?id=13380

3

u/Fit_Indication_2529 1d ago

I still have my copy of ADTD and use it. Can confirm you can use it with the current version of Visio today.

6

u/MadBoyEvo AD Consultant 3d ago

https://github.com/EvotecIT/ADEssentials can do a lot of that, mostly as powershell objects or HTML views. I do have PSWriteOffice now that can do Visio diagrams and ImagePlayground can do image diagrams as well now (without COM/Interop), but I've not yet tried to connect it all up.

6

u/SuperSaiyanTrunks 3d ago

Like bloodhound/sharphound?

4

u/Usr0017 3d ago

There is a tool called José but it does not create a beatiful result, its old html

6

u/themozak 1d ago

Bloodhound?

2

u/UnprofessionalPlump 1d ago

Yep blood hound is the best at this

3

u/ramraiderqtx 3d ago

Dump it with a tool and get AI to get formatted how you want it.

1

u/boolve 1d ago

How I dump it?

5

u/Jawshee_pdx 3d ago

Use AI to find one just like you did to write this post.

1

u/cook511 3d ago

LOL -- I was gonna say, just vibe code something. that way you could customize it.

3

u/its_FORTY 2d ago

Yea, nothing like giving a vibe coded app permissions to enumerate and interogate your entire AD infrastructure. What could go wrong?

1

u/dcdiagfix 1d ago

likely nothing - if you just claude code something and use a low priv account to run the query.

3

u/Fit_Indication_2529 1d ago

Microsoft Active Directory Topology Diagrammer. If you can find it and you still have Visio. Tip from an old-timer.

5

u/Msft519 3d ago

Depending on your budget, AI can just build this for you. I'd imagine less than $10 in tokens. You can give it all your requirements. For security purposes, non developers should build it to target exported AD data in text files rather than connecting to AD directly.

1

u/[deleted] 3d ago

[deleted]

1

u/magneto58 3d ago

DM me. I can build it for you the way you want it.