PRINCIPALS REPORT
The Principals Report provides a comprehensive view of all security principals - users, groups, and computer accounts - discovered during your NTFS permissions scan. This centralized view helps administrators understand who has access to file system resources, identify stale or disabled accounts, and analyze group membership structures across your organization.
Principal Details
The report grid displays key information for each security principal including account name, display name, account type (user, group, disabled user, computer, etc.), and domain. Additional columns for department, job title, and manager can be enabled via the column chooser to support organizational analysis. Expand any row to view detailed information including SID, description, and account creation date.
SID History Resolution
For environments that have undergone Active Directory migrations, the principals report automatically resolves accounts using SID History. When a principal is identified via its historical SID, the report displays both the original SID found in the ACL and the source domain SID from which the account was migrated - essential information for post-migration security audits.
Group Membership Analysis
The Members tab reveals all members of a security group, including nested group members when group expansion is enabled. View each member's account name, display name, type, and whether they are a direct or nested member. The Member Of tab shows the inverse relationship - all groups that a principal belongs to, with group names, display names, descriptions, and SIDs. This bidirectional view helps trace effective permissions through group membership chains.
Principal Statistics
The Statistics tab provides actionable metrics for each principal, showing how many times they appear in various permission scenarios across your file system. Click the search button next to any statistic to instantly apply a post-scan filter that isolates those specific permission instances in the folder permissions report - making it easy to investigate and remediate security concerns for individual accounts.
Filtering and Export
Use the built-in filtering, sorting, and grouping capabilities to organize principals by domain, account type, or any other column. Copy principal details to the clipboard with a single click for documentation or further analysis. The paginated grid efficiently handles environments with thousands of security principals while maintaining responsive performance.