Active Directory reporting with 200+ built-in reports
Report on users, computers, groups, GPOs and security with no PowerShell. Export any report to CSV, Excel or PDF, or schedule it to arrive by email.
User reports
Enabled, disabled, expired and inactive users, and the accounts that have never logged on.
Passwords and logons
Passwords that never expire or are about to, and the last logon date for every account.
Groups
Every group with its scope, member count and full member list.
Security
Find the privileged accounts, stale admins and delegation settings that turn into audit findings.
Custom reports
Build your own report: pick users, computers or groups, choose the columns, and add conditions.
Scheduled reports
Run any report daily, weekly or monthly, and have it emailed to the people who need it.
More features
Every report you need, without writing a script
Summary cards for users, computers and groups. Click any tile to see the accounts behind the number.
Computers by operating system, inactive and never logged on computers, and BitLocker and LAPS status.
Every GPO, link order and permissions, plus unused, empty and conflicting GPOs.
Empty OUs, OUs with delegated permissions or linked GPOs, and contacts without an email address.
Save a report to My reports and share it, so everyone runs the same report the same way.
CSV, Excel, PDF or HTML, for compliance audits, management reviews or further analysis.
A point-and-click interface. No scripts to write and none to maintain when the requirement changes.
Built on the Microsoft API and LDAP, so thousands of users, computers and groups return in seconds without loading a domain controller.
Run reports across several Active Directory domains from a single console.
Customer feedback
What IT teams say about it
We use the last logon reports to create monthly compliance reports for each department. This makes it very easy to export users and their last logon date. The software is very easy to use and eliminates complicated PowerShell scripts.
Our Active Directory was a huge mess. We used the AD Pro Toolkit to find unused computer accounts and disable them. We started with over 900 computers and found 300+ inactive accounts.
I really like having a GUI method of interacting with Active Directory beyond the limited tools in Windows. We used to use scripts for most of our bulk updates and new user creation. AD Pro tools put everything in one place for convenient use anytime.
Self-hosted
Your directory data never leaves your network
AD Pro Toolkit runs on your own machine and talks straight to Active Directory. Nothing is sent to a vendor cloud.
FAQ
Frequently asked questions
How do I get reports from Active Directory?
Active Directory holds users, computers, groups and OUs, and each object carries dozens of attributes. Reviewing them by hand is slow, and building the same view in PowerShell means writing and maintaining a script. AD Pro Toolkit turns that into picking a report and clicking run. A report of every user and their group membership is two clicks.
How does the reporting tool work?
It queries your domain over the Microsoft API and LDAP for objects, permissions and account details. Selecting the Disabled Users report, for example, queries Active Directory for accounts set to disabled and returns the account name, status, when it was created and when it was last changed.
How do I create a report of inactive users?
Active Directory updates the lastLogonTimestamp attribute each time a user authenticates. Click Logon Reports, then Inactive Users, choose how many days counts as inactive, and click run.
How do I export a report?
Run the report, click Export, and pick the format. To export every enabled user to CSV: User Reports, then Enabled Users, run, then Export to CSV.
Can I create custom reports?
Yes. Click Custom Reports, choose a report category, and configure which attributes and conditions you want. Saved custom reports run like any built-in one.
Can reports be scheduled and emailed?
Yes. Every report can be scheduled and emailed to multiple recipients. Open the scheduler, configure your mail server, then add a report to the schedule.
Free trial
Simplify Active Directory reporting
Try AD Pro Toolkit free for 15 days. Every report unlocked, installed on your own network, no credit card.