AR-ADDS

Active Directory Assessment

A structured review of your Active Directory environment — replication, DNS, site topology, security hygiene — using Microsoft's RAP-as-a-Service framework.

What this is

Active Directory is the foundation of identity for most organizations, and the leading target for attackers who reach the internal network. It's also one of the systems most likely to drift over time — the engineers who originally built it have moved on, the design decisions are undocumented, and the AD that runs today is the AD that grew, not the AD that was designed.

This assessment uses Microsoft's RAP-as-a-Service framework to analyze the environment against current best practices. It surfaces issues across replication, DNS, site topology, operational processes, and security hygiene — and ranks them by severity.

The framework is the same one Microsoft Premier Support uses for the same assessment. We get the diagnostics, the Microsoft engineer reviews the findings, and we deliver a remediation plan with twelve months of continuous best-practice updates.

What you'll get

An AD health report covering replication, DNS integration, site topology, operational hygiene, and security posture. Each finding categorized by severity with specific remediation guidance.

A prioritized remediation roadmap — quick wins that can be fixed this week, structural issues that need planning, and risk items that need executive awareness.

Twelve months of continuous best-practice updates through the RAP-as-a-Service subscription. As Microsoft updates the assessment framework, your environment is re-scored against the new baseline. Monthly reassessments included.

How it goes

A · Setup
Install tooling, collect data

Day 1. Install the RAP assessment tooling against the AD environment. Run the diagnostic collection. This takes a single day on-site or remote, with minimal impact to operations.

B · Analyze
Microsoft engineer review

Weeks 1–2. A Microsoft engineer reviews the diagnostic findings, validates context with us, and produces the assessment report. We walk through each finding, explain what it means, and translate it into action.

C · Improve
Monthly reassessment for a year

Twelve months following delivery. The environment is reassessed monthly against Microsoft's latest best-practice baseline. New findings surface as Microsoft updates the framework. Trends visible over time so improvement is measurable.

Practical details

Duration
1 day collection + 2 weeks reporting + 12 months subscription
Delivery
Remote, with optional on-site collection
Format
Microsoft RAP-as-a-Service
Scope
Single AD DS forest on physical or virtual machines
Your side
AD administrator for credential and access provisioning
Reference
Microsoft RAP-as-a-Service for Active Directory

If you want to talk through your situation — AD complexity, forest age, what's been documented — write to us.

+66 81 919 0291

We usually reply the same day.

← In the Cloud / Works