There is no fixed number because the effort depends on the size and history of your environment. If you know the cost drivers, though, you can compare quotes well and control the scope.
Domain controllers, replication and operating system versions
Privileged groups such as Domain Admins and delegated rights
Outdated, inactive or never-expiring accounts and service accounts
Password policies and Kerberos settings
Group policies and trusts to other domains
Certificate services and connections to cloud services such as Entra
What determines the price
Size: number of domains and forests, domain controllers, sites, user and computer accounts.
Condition: grown environments with many legacy items and missing documentation take longer than clean ones.
Depth: a quick check with common audit tools costs less than a manual deep review that assesses every finding.
Scope: report only, or also implementing the measures, re-checking and training administrators.
Timeframe: urgent dates or work outside business hours make it more expensive.
What you receive in the end
You receive a list of findings sorted by urgency, concrete measures with reasons and a closing meeting. This shows what needs fixing immediately and what can be handled in day-to-day operations.
Typical process
1. Initial call: clarify goals, scope and environment.
2. Data collection: reading the configuration, usually with read-only access.
3. Analysis: assessing and prioritising findings.
4. Report and meeting: discussing results and measures.
5. Optional implementation: carrying out measures after approval as a separate step.
Estimating the cost
A reliable price is only possible after a short conversation about scope and environment. Get in touch and we will agree scope and effort with you in advance.
Frequently asked questions
How long does an Active Directory audit take?
It depends on scope and depth. Small environments can be checked with modest effort, large or grown environments need several days.
Does an audit change anything in my Active Directory?
Data collection is usually read-only. Changes are only made after your approval, as a separate step.
How often should I have my Active Directory reviewed?
After major changes such as migrations, acquisitions or a security incident, and beyond that regularly, for example once a year.