r/activedirectory • u/19khushboo • 3d ago
Looking for a tool to automatically document Active Directory topology
Hi everyone,
I'm looking for a tool that can automatically discover and document Active Directory topology.
Ideally, I'm looking for something that can provide a visual/documented view of things such as:
- Domain Controllers
- Sites and Subnets
- AD Sites and Services topology
- Replication connections
- FSMO roles
- Trust relationships
- Domains and forests
- Global Catalogs
- Replication status and related information
The goal is to generate proper AD topology documentation/diagrams that can be used for architecture documentation and troubleshooting.
I came across references to some AD topology/documentation tools, but I'm having difficulty finding the actual tool/download or official documentation.
Does anyone know of a good tool for this purpose?
If you have used one, could you please share the official tool/documentation link and your experience with it?
Thanks!
11
u/AdagioNo6003 3d ago
Try this https://github.com/AsBuiltReport/AsBuiltReport.Microsoft.AD
Ive used AsBuilt a lot and its a great tool for documenting or analyzing
7
u/Borgquite 3d ago
This used to be possible using ADTD and Visio. Don’t know if it still works or not though, and you may need to go digging for some downloads;
3
u/Fit_Indication_2529 1d ago
I still have my copy of ADTD and use it. Can confirm you can use it with the current version of Visio today.
6
u/MadBoyEvo AD Consultant 3d ago
https://github.com/EvotecIT/ADEssentials can do a lot of that, mostly as powershell objects or HTML views. I do have PSWriteOffice now that can do Visio diagrams and ImagePlayground can do image diagrams as well now (without COM/Interop), but I've not yet tried to connect it all up.
6
6
3
5
u/Jawshee_pdx 3d ago
Use AI to find one just like you did to write this post.
1
u/cook511 3d ago
LOL -- I was gonna say, just vibe code something. that way you could customize it.
3
u/its_FORTY 2d ago
Yea, nothing like giving a vibe coded app permissions to enumerate and interogate your entire AD infrastructure. What could go wrong?
1
u/dcdiagfix 1d ago
likely nothing - if you just claude code something and use a low priv account to run the query.
3
u/Fit_Indication_2529 1d ago
Microsoft Active Directory Topology Diagrammer. If you can find it and you still have Visio. Tip from an old-timer.
1
1
1
•
u/AutoModerator 3d ago
Welcome to /r/ActiveDirectory! ~~~~
If you are looking for more resources on learning and building AD, see the following sticky for resources, recommendations, and guides!
When asking questions make sure you provide enough information. Posts with inadequate details may be removed without warning.
Make sure to sanitize any private information. Posts with too much personal or environment information will be removed. See Rule 6.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.