All-in-one Active Directory Management Tool

See your whole directory at a glance

8 dashboards give you an overview of your Active Directory: users, groups, computers, stale accounts, passwords, security, topology and more.

One click to switch

Overview, users, groups, computers, stale accounts, passwords, security and topology, each with its own dashboard.

200+ reports, or build your own

Over 200 built-in reports on users, groups, computers, passwords, logons and Group Policy, plus a builder for your own. Export to Excel, CSV or PDF, or schedule them to run.

Build your own reports

Pick users, computers or groups, choose the columns, add conditions and save it to run again.

Change hundreds of accounts at once

Create, update, move and disable users in bulk from a CSV file, with every row checked before anything is written to Active Directory.

Preview before you update

Every row from the CSV is shown here first. Nothing changes in Active Directory until you click Update.

Create on-prem and Microsoft 365 users at once

Create the Active Directory account and the Microsoft 365 user in one step, with licenses assigned. Both use the same user principal name, so Entra Connect links them on the next sync instead of creating a duplicate.

Microsoft 365 in the same form

Switch on the Microsoft 365 tab to create the cloud user and assign licenses along with the AD account.

Find stale accounts before they become a risk

See which accounts have not logged on in weeks or months, then clean them up in a few clicks instead of a script.

Automate routine Active Directory tasks

Create your own automations to handle routine Active Directory tasks. Choose which accounts to target, what to do with them and when to run, then preview the matches before anything changes.

See who it will affect

Every account that matches your conditions is listed as you build the automation, before it ever runs.

Offboard users in a few clicks

Disable the account, remove its groups and move it out of the way together, with a saved record of what the account had before anything changed.

Pick the steps you need

Disable, reset the password, remove groups, move to an OU and more, with a record of the account saved first.

Reset passwords and unlock accounts

Look up a user, see at a glance whether the account is locked out, disabled or expired, then reset the password, unlock it or enable it in one go.

See why they can't log in

Locked out, disabled or expired. The account's status shows before you reset anything.

Give the help desk just enough access

Role-based access lets you hand out password resets, group changes or reports, limited to the OUs each person is responsible for.

Find the weak spots in your directory

Check Active Directory for risky settings and accounts, such as stale admins and passwords that never expire, and see what to fix first.

Built for production

The admin and security features you'd expect from a tool that runs against your directory.

• Self hosted

  Runs on your own Windows server. Your directory data stays on your network.

• Easy to install

  A setup wizard configures the service account and connects your directory.

• Managed service accounts

  Run the service as a gMSA or sMSA, with no service password to store or rotate.

• Multiple domains

  Connect more than one Active Directory domain and manage them from one console.

• Built-in audit logs

  Every change made in the app is logged, with who made it and what changed.

• Log forwarding

  Send audit events to your SIEM over Syslog or an HTTPS webhook, as CEF or JSON.

• Encrypted secrets

  Stored passwords and keys are encrypted under a master key.

• Your own SSL certificate

  Serve the app over HTTPS with a certificate you choose.