Supported operating systems
The toolkit runs on the machine you install it on. It does not need to be a domain controller.
- Windows 10
- Windows 11
- Windows Server 2012
- Windows Server 2016
- Windows Server 2022
- Windows Server 2025
Software
.NET 4.8 Runtime or higher. Windows 10, Windows 11, Windows Server 2022 and later include it by default, so most environments need nothing extra.
Firewall and ports
Most of the toolkit talks only to your domain controllers over LDAP. The tools that reach individual computers are listed below, with what each one needs.
- LDAP tools and reports connect only to domain controllers. No firewall changes are needed in most environments.
- WMI-based tools need the Windows Management Instrumentation firewall rule enabled on the target computers.
- Local admin rights on the target computers are needed by the account running WMI-based tools.
- HTTPS to activedirectorypro.com for license activation. This is one time only, and internet access can be removed afterwards.
WMI-based tools, which connect to remote computers
| Tool | Ports | Firewall rule |
|---|---|---|
| Local Admins Report | 135 (RPC), 445 (SMB), dynamic RPC | Windows Management Instrumentation |
| Local Groups Report | 135 (RPC), 445 (SMB), dynamic RPC | Windows Management Instrumentation |
| Uptime and Last Boot | 135 (RPC), 445 (SMB), dynamic RPC | Windows Management Instrumentation |
| Remote Restart and Shutdown | 135 (RPC), 445 (SMB), dynamic RPC | Windows Management Instrumentation |
| Find Service Accounts | 135 (RPC), 445 (SMB), dynamic RPC | Windows Management Instrumentation |
Other remote tools
| Tool | Ports | Firewall rule |
|---|---|---|
| Logon Checker, who is logged on | 445 (SMB) | File and Printer Sharing |
| Local Certificates Report | 445 (SMB) | Remote Registry |
| NTFS Permissions | Local filesystem, or 445 (SMB) for remote shares | File and Printer Sharing, for remote shares |
| Connectivity Checker | ICMP, 389, 445, 636, 3389, 5985, 5986 | Varies. This tool tests connectivity. |
| DNS Health Check | 53 (DNS) | Not applicable, uses nslookup |
| Domain Health Check | 389 (LDAP) | Not applicable |
Frequently asked questions
Do I need to install it on a domain controller?
No. Install it on any domain-joined workstation or server. It connects to Active Directory using your existing credentials.
Does it need SQL Server or IIS?
No. There is no database to stand up and no web server to configure.
Are there agents to deploy?
No. The tools that reach remote computers use WMI or SMB, both already present on Windows.
Does it need permanent internet access?
No. HTTPS to activedirectorypro.com is needed once, to activate the license. After that you can remove internet access.
What rights does the account need?
Your existing Active Directory rights for directory work, plus local admin on the target computers for the WMI-based tools.
Not sure about your environment? Email support@activedirectorypro.com and we will tell you.