AD Pro Toolkit Browser Based Release Notes

v4.1.5

October 9, 2026

Schedule a custom report. Any report you build under Reports > Custom Reports can now be put on a schedule - emailed, saved to a folder, or both - the same as the built-in reports.
Scope a custom report to an organizational unit. The custom report builder gains an OU picker, so a report can be limited to objects under one or more OUs (nested OUs included). The scope is saved with the report and applied wherever it runs, including on a schedule.
Automation report emails include the matched accounts. A report-only automation now attaches a CSV of the accounts it would act on (with the change it would make); an active run attaches the same list with each account's result.

Group members, everywhere. The members list on both the Groups report panel and the Tools > Groups editor now shows every member - however many thousands - in a fast, searchable table with Name and Type columns, instead of a capped, slow list. The Tools editor adds tick-boxes and a bulk Remove, and large groups open instantly.
Redesigned Add/Remove to groups. The Tools > Users group-membership dialog is rebuilt: search the directory and tick several groups to add at once, filter the account's current groups, and remove any with one click. Changes apply immediately - no separate Apply step.
Reorganized Settings menu. The Settings sidebar is grouped into General, Configuration, Security and Auditing for easier scanning.
Topology subnets wrap. A site with dozens of subnets now wraps them onto several lines instead of forcing the table to scroll sideways.

Bulk actions on computers acted on only one. In Tools > Computers, selecting several computers and choosing Disable, Enable, Delete or Move now acts on all of them, not just one. The status column also updates straight away after the change instead of waiting for the next sync.
Computer group members showed as "Unknown". A computer that is a member of a group is now correctly identified as a Computer, with its name, rather than an unknown member. (Reclassified on the next sync.)
Group panel listed members twice. The Groups report detail panel no longer repeats the member list below the members card.
Security assessment was visible to the reports-only role. It is now held one tier higher, so a reports-only user no longer sees it; the other dashboards are unchanged.

October 6, 2026

Save scheduled reports to disk. A scheduled report can now be emailed, saved to a folder on the server (a local path or a network share), or both. Pick the delivery method when you create or edit the schedule; each run is written with a timestamp so one run never overwrites the last.
Find blank attributes. Automation conditions, and the reports advanced filter, gain "is empty" and "is not empty" - so you can match on whether a field is set, such as users with no Office, department or manager.
Managed service account support. The Windows service can run as a domain Managed Service Account (sMSA or gMSA), which has no password to store. A new desktop setup wizard configures the service account and its permissions and connects the directory, and the Connections page then shows which account the app authenticates as.

Computer edits apply immediately. Saving a change to a computer updates the grid right away - the same live re-read that users and groups already do - instead of waiting for the next sync.
Connections page shows the service account. It now shows the Windows account the service runs as (Local System or a managed service account) and asks for a username and password only when one is actually needed.

DOMAIN\username logons were rejected. A correct down-level username (DOMAIN\user) with the right password could be refused when testing a connection or syncing; the credential is now passed correctly, so it binds as expected.

September 30, 2026

Custom report builder. Build, save and run your own reports over users, computers or groups: choose the object type, pick and reorder the columns, add a multi-condition filter, then run or export to Excel, CSV or PDF. Saved reports live under Reports > Custom Reports, split into My Reports and Shared with Me, and open as a normal report page with an Edit path back to the builder.
Offboarding records. The offboard tool can save a record of each account first - its attributes, group memberships, direct reports and the groups it managed - captured before any step runs. Records are listed in a Saved records card on the offboard page and download as a single Excel workbook, so they are still there after the account is deleted.
Organizational Unit column. User, computer and group reports can show the parent OU the object lives in, added from the Columns picker.

Add group members in bulk. The Members tab in Tools > Groups searches the directory and lets you tick several people and add them all in one action, instead of one at a time.
Topology. The Structure view lists every site with its subnets and controller count, including empty sites the diagram leaves out, and the Domain controllers table is wider and no longer wraps.
Force full re-read runs now. Confirming a full re-read on the sync panel starts the pass straight away, rather than only arming the next run and making you press Sync now as a second step.
The dashboard Changes card opens the Sync log.
Section landing follows your role. Clicking a sidebar section goes to the first page your role can actually open, instead of an access-denied page - a Group admin clicking Tools lands on Groups.

Cleanup kept a stale selection after a move. The results grid now tracks rows by objectGUID and clears the selection after each action, so moving an account and then disabling it acts on exactly what you ticked instead of reading as two accounts.
Create user errors are readable. A logon name that is already in use now says "That logon name is already in use" instead of the raw LDAP constraint error.

September 29, 2026

Custom attributes per object type. Extra LDAP attributes can be configured separately for users, computers and groups, and each shows only in that type's reports.

Logs page tabs. Settings > Logs is split into an Audit log and a Sync log, so recent sync activity lives beside the audit trail.
Scope Cleanup to OUs. Cleanup gains an OU picker, like the reports, so a check can be limited to part of the directory.

September 29, 2026

Multiple role grants per person. One account can hold more than one scoped role - a Group admin for one OU and a Password Reset holder, say - rather than a single role each.

Faster pickers. The user and group search boxes use Ambiguous Name Resolution, an indexed directory lookup, instead of a slow substring scan - the access-control user search in particular is now near-instant.

September 19, 2026

Licence seat tiers. The number of admin seats is read from the licence key, with a redesigned Licence page showing the tier, who the licence is registered to, and when it expires.
User Provisioning role. A scoped role that can create accounts from the New user tool and nothing else - no user grid, reports or settings.
Licensed automations. Scheduled rules that act on the directory, gated by the licence tier; the free edition runs them in report-only mode.

September 11, 2026

Major update: secrets stored in the database are encrypted under a portable master key, the sync is hardened against overlapping and stuck runs, and a group-compare tool is added.