Solution to Find Unused Data and Groups

For most organizations, 50% of data becomes 'stale' after 90 days. Unfortunately, it’s very difficult to determine where that data resides, so it remains in expensive file systems and SharePoint storage, possibly exposed to risk due to excessive permissions and adding little to the organizations productivity. Like data, the security groups and access control lists grow stale—groups may be empty or unused on the file systems, or may be deleted from directory services and not removed from the access control lists, resulting in the “unresolved SID/orphan SID” issue.

In order to properly update directory services and permissions, it takes more than a search of active directory—it requires answers to difficult questions:

• What data is not being used, or stale?
• Which groups are present on ACLs?
• Which groups are not used in ACLs?
• Which security groups are empty?
• Where do ACLs contain an unresolved/orphan SID?
• Which ACLs contain a user SID?
• Which are my inactive users?
• Which groups contain disabled users?
• Where are looped nested groups, or groups that directly or indirectly contain themselves?

Learn more, read the Use Case: Identifying Stale Data and Groups

The Varonis Data Governance Suite provides a comprehensive, automated solution to answer these questions, providing a framework to identify stale data, legacy users and groups in your directory services that are present in access control lists (ACLs) on file systems, inactive users, disabled users, unused and empty security groups. After initial data clean up and directory clean-up activities, Varonis provides an automated solution to efficiently maintain your data sets, permissions, and groups in your directory services in Active Directory, SharePoint, LDAP, and NIS.