Dovestones AD Reporting vs One Identity Active Roles

Dovestones AD Reporting automates Active Directory audits, scheduled reports, and account-management tasks on Windows. Its pre-built and custom reports cover users, passwords, computers, and groups, with detailed account status and ways to identify when users or computers were last used. It can also run one-off queries, such as finding computers that have not been used recently.

A built-in scheduler can run reports and bulk changes in the background. Available actions include moving, deleting, or disabling redundant accounts and removing users from sensitive groups. Reports can be emailed, printed, or exported, and the product supports command-line operation. The manual says installation requires no server components or agents and no changes to Active Directory, though installation adds a Windows service for scheduled jobs. Listed requirements are Microsoft .NET Framework 4.5 and Windows 7 or Windows Server 2008 R2 or later. The product has a trial version, and support is listed by phone and email.

One Identity Active Roles is a paid administration and governance product for Microsoft Active Directory, Entra ID, and Microsoft 365. A unified console brings those environments into one interface, while workflow automation helps implement and enforce consistent policies. Lifecycle management uses automation and scripting to support least-privilege accounts. Role-based access control enables fine-grained delegation across Active Directory domains and Entra ID and Microsoft 365 tenants. Change history and activity tracking support audits and remediation. Listed integrations include One Identity Manager, Safeguard Authentication Services, Defender, Change Auditor, GPO Admin, Password Manager, and Starling Connect. Supported platforms are web, iOS, Android, and self-hosted virtual or physical appliances; the installation guide describes on-premises requirements. A license must be purchased for legal use, and the fee depends on the number of managed users. Pricing is on request. There is no free plan, but the product page offers a free trial and a virtual trial. Listed capabilities include delegated administration, AD auditing, lifecycle automation, and reporting; password self-service is not included.