Gold Finger Mini is an Active Directory (AD) privileged access assessment tool that uses patented effective permissions analysis to identify who holds critical privileged access within any Active Directory deployment. Unlike standard AD permissions analyzers, it performs effective permissions analysis rather than simple ACL inspection, providing accurate insight into actual access rights granted through complex permission structures. The tool operates in two levels — Basic and Advanced — each containing 8 reports covering critical AD access scenarios. It is available in 4 editions, including a free edition. Basic level reports cover scenarios such as: - Who can reset passwords (own, executive, or privileged accounts) - Who can change Domain Admins group membership - Who can modify AdminSDHolder object permissions - Who can create accounts in the Users container - Who can link GPOs to the Domain Controllers OU - Who can enable disabled accounts Advanced level reports cover scenarios such as: - Who can replicate domain secrets (DCSync / password hashes) - Who can disable Smartcard enforcement on accounts - Who can modify security group memberships - Who can change permissions on OUs - Who can modify computer account SPNs The tool can be installed and run on any domain-joined machine in under two minutes. It does not require privileged access, agent installation, changes to Active Directory, or additional firewall port openings. It is designed to be usable by IT personnel, auditors, penetration testers, and non-technical users alike.