AD Pro Toolkit Browser Based Release Notes

v4.1.3

September 30, 2026

Custom report builder. Build, save and run your own reports over users, computers or groups: choose the object type, pick and reorder the columns, add a multi-condition filter, then run or export to Excel, CSV or PDF. Saved reports live under Reports > Custom Reports, split into My Reports and Shared with Me, and open as a normal report page with an Edit path back to the builder.
Offboarding records. The offboard tool can save a record of each account first - its attributes, group memberships, direct reports and the groups it managed - captured before any step runs. Records are listed in a Saved records card on the offboard page and download as a single Excel workbook, so they are still there after the account is deleted.
Organizational Unit column. User, computer and group reports can show the parent OU the object lives in, added from the Columns picker.

Add group members in bulk. The Members tab in Tools > Groups searches the directory and lets you tick several people and add them all in one action, instead of one at a time.
Topology. The Structure view lists every site with its subnets and controller count, including empty sites the diagram leaves out, and the Domain controllers table is wider and no longer wraps.
Force full re-read runs now. Confirming a full re-read on the sync panel starts the pass straight away, rather than only arming the next run and making you press Sync now as a second step.
The dashboard Changes card opens the Sync log.
Section landing follows your role. Clicking a sidebar section goes to the first page your role can actually open, instead of an access-denied page - a Group admin clicking Tools lands on Groups.

Cleanup kept a stale selection after a move. The results grid now tracks rows by objectGUID and clears the selection after each action, so moving an account and then disabling it acts on exactly what you ticked instead of reading as two accounts.
Create user errors are readable. A logon name that is already in use now says "That logon name is already in use" instead of the raw LDAP constraint error.

September 29, 2026

Custom attributes per object type. Extra LDAP attributes can be configured separately for users, computers and groups, and each shows only in that type's reports.

Logs page tabs. Settings > Logs is split into an Audit log and a Sync log, so recent sync activity lives beside the audit trail.
Scope Cleanup to OUs. Cleanup gains an OU picker, like the reports, so a check can be limited to part of the directory.

September 29, 2026

Multiple role grants per person. One account can hold more than one scoped role - a Group admin for one OU and a Password Reset holder, say - rather than a single role each.

Faster pickers. The user and group search boxes use Ambiguous Name Resolution, an indexed directory lookup, instead of a slow substring scan - the access-control user search in particular is now near-instant.

September 19, 2026

Licence seat tiers. The number of admin seats is read from the licence key, with a redesigned Licence page showing the tier, who the licence is registered to, and when it expires.
User Provisioning role. A scoped role that can create accounts from the New user tool and nothing else - no user grid, reports or settings.
Licensed automations. Scheduled rules that act on the directory, gated by the licence tier; the free edition runs them in report-only mode.

September 11, 2026

Major update: secrets stored in the database are encrypted under a portable master key, the sync is hardened against overlapping and stuck runs, and a group-compare tool is added.