Yes, you won’t need to buy a majority of the software below unless you want some premium features that some of them require payment for, but they work nonetheless without Upgrading. Solarwinds offers a Truly Free Active Directory Users and Computers permissions analyzer, allowing you to browse and identify with groups and users have which permissions.

Also, you can see the breakdown of inherited permissions of each user by their group membership. This include the following utilities:. They each have a friendly and easy to use Graphical Interface and come in very handy without having to log into your Domain Controller. ADSelfService Plus supports the IT help desk by reducing password reset tickets and spares end users the frustration caused by computer downtime. ADAudit Plus offers Real-time monitoring, user and entity behavior analytics, and change audit reports that help you keep your AD and IT infrastructure secure and compliant.

This web-based software portfolio unifies all the functionalities needed for an enterprise: from user provisioning, self-service to risk governance and offers it with a simple, easy to use interface. AD is the right solution for bridging the gap between technology and the complex business needs. SpecOps Command utility allows you to administrate Computers and Users within your network and run VBScripts or PowerShell scripts using Group Policy quickly and ensure all feedback is received at the utility.

Features include Scheduling scripts to run at certain times and how often to run as well as web-based Reporting of feedback from scripts that have run. AD info tool comes with different pre-built reports that allows you to query a large number of attributes including Users, Computers, Contacts, Organization Units, GPO’s, Printers and more! One of the benefits of this is you can run this program without Domain Admin privileges.

Ad Query is a Free executable tool no install required that can be used to easily and quickly search Active Directory for information regarding a User or Computer for specific information.

This is done through audits and alerting of AD configuration and changes in Real-time so you know exactly what is changing and how it effects your compliance and whether your at risk or not. Check out their Full list of tools at the link below. This tool allows a user that is assigned as a Manager of a group to manage members and settings of that given group including adding and removing other users and exporting group member to a CSV file. You additional configuration is required, the utility will automatically detect which groups you are a Manager of and allow you to make changes as necessary.

This Health Scanner from Microsoft is specifically targeted towards Admins and Engineers who want to get an Overview of their current Active Directory Health by scanning it for Problems and inconsistencies.

This tool is great for scanning your network infrastructure and pinpointing issues that could cause your AD from functioning correctly. You must be a member of the Domain Admins group to run this utility. You have the ability to restore AD Deleted objects and if necessary, revert back to previous time periods if you made the wrong changes.

AdRestore enumerates all Tombstoned objects in your Domain and gives you the option to restore them individually as needed per your selections. This was all done through the command-line, until recently Guy Teverovsky created a GUI version of the program for those not comfortable or familiar with the command-line version.

AD Explorer is an Advanced Viewer for searching, editing and viewing Active Directory objects and properties quickly and easily without having to drill down into each object individually. You can even create snapshots of AD to view offline if you would like to work off a snapshot rather than AD live. Privilege Explorer is a utility that automates the process of Active Directory file permissions by analyzing and reporting on permissions levels.

This program brings automation to permission analysis and reporting to one central location and assists with compliance and intrusion detection, as well verifying that all permissions are tight and minimizing excessive permissions for unauthorized users. Netwrix Account Lockout Examiner does just what it says in the name — It is a Freeware utility that alerts IT personnel when an account has been locked out of Active Directory and allows you to unlock the account from within the GUI of the tool or your mobile device quickly.

This tool also does exactly what it says — automates that process of finding and locking down Stale or Inactive accounts in ADUC and helps you mitigate any risk of those accounts becoming compromised and being used for malicious activities. Active Directory Replication Status utility is a tool that helps your analyze the Replication of Domain Controllers in your network to ensure that replication is actually replicating.

This tool helps you pinpoint with domain controller has errors and which ones are not replicating correctly. AD permissions reporter is used for extracting all permissions from within your domain for every object. You can additionally filter down certain objects or permissions you would like to analyze to get an understanding of their permission levels.

You can also use the same password for every account if needed as well. Additional features of this utility include enabling and disable active directory accounts in bulk, as well as Unlocking them in bulk.

You can also display images from all accounts, export existing images, upload images in bulk using the SAM or common name of accounts as well. You can also search individual login times and dates by searching any column for specific information.

Easily query Active Directory to get detailed information about users and objects with Active Directory through this easy, GUI based utility. You can further export data to a CSV file and get individual reports as necessary.

Specops Password Auditor is a free tool that scans Active Directory to detect password and privileged account security vulnerabilities. These insights can be used to reduce attack surface or maintain compliance. The tool scans Active Directory to identify accounts that are utilizing leaked passwords against a list of close to billion previously leaked passwords, in addition to gauging password policy strength against brute force attacksand compliance requirements such as NIST and PCI.

The tool can also pin-point stale or inactive admin accounts in addition to the following:. The collected information will be used to display multiple interactive reports depicting the aforementioned vulnerabilities. The reports are exportable to csv files and some useful display features include:. Specops Password Auditor will only read information from Active Directory, it will not make any changes.

They have pre-built reports that allow you to quickly run a report without much effort and output information that your looking for fairly quickly. Ad FastReporter utilizes a built-in Local database so there is no overhead or stress on your AD infrastructure when running reports and storing them.

AD Photo Editor from Albusbit. This program really does have a quite a few features that should Cost something, but in all reality is FREE!

We definitely like the value in this AD tool! This is great all-in-one tool for managing AD Users and Accounts from a centralized location and gives you the ability to manage multi-domain environments as well!

We recently reviewed Symalogic AD Report builder here and wanted to add this software on this post as well, as they have a FREE Version that gives you some great features to use without having to upgrade to the full version. To see a Full list of their Features, have a look at the link below — We’ll highlight the features of their Free Versions here:.

Microsoft ADRestore. Blacklisted Passwords. Password Policy relative strength. Stale inactive admin accounts. Compliance rating.

 
 

 

グループポリシー設定リスト – マイクロソフト系技術情報 Wiki – Sponsored AD

 
Jun 03,  · SysadminAnywhere is a great Active Directory Tool for Windows 10 that has a long list of features for AD Administration and Management. Some features include Resetting Users password, Add/Edit/Delete Objects in AD, Add Photos, Restart/Shutdown Computers remotely in AD, Check for Updates and Monitoring Hardware and Computers (CPU, Drive, Memory Estimated Reading Time: 10 mins. Group Policy Management Tools. Group Policy Management Tools include Group Policy Management Console, Group Policy Management Editor, and Group Policy Starter GPO Editor. √. √. Group Policy has some new features in Windows Server Technical Preview that are not available on older operating systems. Hyper-V Tools. Download. DISCLAIMER: Everything posted here is offered as-is. By downloading it, you accept full responsibility for testing to ensure it does not cause any problems in your own environment. There is no warranty on any of the code or files on this page, so it’s up to .