Abstract: In some examples, active directory management and remediation may include obtaining data associated with active directories, and generating, based on the obtained data, a data model that includes a plurality of active directory concepts. A graph may be generated and include the active directory concepts as nodes and relationships between the nodes. The graph may be analyzed to identify user to group memberships. A membership score and a reasoning for the membership score may be determined for each identified user to group membership of the user to group memberships. The membership score and the reasoning for the membership score may be analyzed for each identified user to group membership. Further, based on the analysis of the membership score and the reasoning for the membership score, the at least one of the user to group memberships may be remediated.