Active Directory Reporting Tool for Complete Visibility
AD Pro Toolkit gives you 200+ built-in Active Directory reports covering users, computers, groups, GPOs and security. No PowerShell required, and every report exports to CSV, Excel or PDF.
Download Free Trial Launch online demo
Trusted by 5,000+ organizations worldwide.
AD Pro Toolkit: Powerful Active Directory Reporting Made Simple
Built-in Active Directory reporting is limited, and getting the right information with PowerShell often means writing and maintaining scripts. AD Pro Toolkit gives you instant access to the reports you need, all from one easy-to-use interface.
200+ built-in reports
Users, computers, groups, Group Policy and security, with nothing to configure. Pick a report and click run.
Interactive dashboards
Summary cards for users, computers and groups, plus password expirations. Click any tile to open the accounts behind the number, then jump to the full report.
Schedule automated reports
Run any report daily, weekly or monthly and have the result delivered straight to an inbox.
Fast on large domains
Built on the Microsoft API and LDAP, so thousands of users, computers and groups return in seconds without loading a domain controller.
No PowerShell required
A point-and-click interface. No scripts to write and none to maintain when the requirement changes.
Customize any report
Change any report and pick the attributes you actually need, then save it and run it again.
Export anywhere
CSV, Excel, PDF or HTML, for compliance audits, management reviews or further analysis.
Multiple domain support
Run reports across several Active Directory domains from a single console.
LDAPS supported
Encrypted communication to your domain controllers over SSL.
Users
User reports
A complete picture of your Active Directory user accounts, from account status to the properties nobody has checked in years.
- Enabled and disabled user accounts
- Recently created and deleted users
- Expired and inactive user accounts
- Users that have never logged on
- Account expiration dates
Passwords and logons
User password and logon reports
Password health across the organization, and the logon data that tells you which accounts are still in use.
- Users with passwords that never expire
- Accounts with old or expired passwords
- Last logon date for all user accounts
- Inactive users who have not logged on recently
- Passwords about to expire
Computers
Detailed computer reports
A full inventory of the machines in your environment, including the ones that stopped reporting in months ago.
- Enabled and disabled computer accounts
- Computers by operating system
- Inactive computers that have not logged on recently
- Computers by department or organizational unit
- BitLocker and LAPS password report
Groups
Group and group membership reports
Who has access to what, including the nested membership that hides real access from a quick look at a group.
- All Active Directory groups and their properties
- Group membership for all users
- Empty groups with no members
- Nested group membership
- Recently created and deleted groups
Security
Security reports
The accounts and settings that turn into findings at audit time, or into an incident before one. Useful for PCI, HIPAA and SOX evidence.
- Privileged accounts with non-expiring passwords
- Stale privileged accounts
- Users with SID history
- Orphaned admin accounts
- Unconstrained delegation
Group Policy
Group Policy reports
Every GPO, where it is linked and what it is doing, so you can find the ones that conflict and the ones nobody needs any more.
- GPO inventory report
- Find unused GPOs
- Duplicate and conflicting GPO policies
- GPO link order
- GPO permissions
- Disabled GPO links
Automation
Schedule automated reports
Any report can run on a daily, weekly or monthly schedule. A weekly summary of inactive accounts, a monthly password expiry report for the security team, a daily snapshot of recent changes. Set it once and it keeps arriving, timestamped, without anyone remembering to run it.
- Schedule any of the 200+ reports
- Daily, weekly or monthly
- Delivered by email to multiple recipients
- Every run timestamped
What customers say
We use the last logon reports to create monthly compliance reports for each department. This makes it very easy to export users and their last logon date. The software is very easy to use and eliminates complicated PowerShell scripts.
Our Active Directory was a huge mess. We used the AD Pro Toolkit to find unused computer accounts and disable them. We started with over 900 computers and found 300+ inactive accounts.
I really like having a GUI method of interacting with Active Directory beyond the limited tools in Windows. We used to use scripts for most of our bulk updates and new user creation. AD Pro tools put everything in one place for convenient use anytime.
Frequently Asked Questions
How do I get reports from Active Directory?
Active Directory holds users, computers, groups and OUs, and each object carries dozens of attributes. Reviewing them by hand is slow, and building the same view in PowerShell means writing and maintaining a script. AD Pro Toolkit turns that into picking a report and clicking run. A report of every user and their group membership is two clicks.
How does the reporting tool work?
It queries your domain over the Microsoft API and LDAP for objects, permissions and account details. Selecting the Disabled Users report, for example, queries Active Directory for accounts set to disabled and returns the account name, status, when it was created and when it was last changed.
How do I create a report of inactive users?
Active Directory updates the lastLogonTimestamp attribute each time a user authenticates. Click Logon Reports, then Inactive Users, choose how many days counts as inactive, and click run.
How do I export a report?
Run the report, click Export, and pick the format. To export every enabled user to CSV: User Reports, then Enabled Users, run, then Export to CSV.
Can I create custom reports?
Yes. Click Custom Reports, choose a report category, and configure which attributes and conditions you want. Saved custom reports run like any built-in one.
Does the product support LDAPS?
Yes. LDAPS is enabled from the settings page, so communication with your domain controllers is encrypted over SSL.
Can reports be scheduled and emailed?
Yes. Every report can be scheduled and emailed to multiple recipients. Open the scheduler, configure your mail server, then add a report to the schedule.
Simplify Active Directory reporting
Try AD Pro Toolkit free for 15 days. Every report unlocked, installed on your own network, no credit card.