active directory reporting tool RRS feed

  • Question

  • Hi ALL,

           Anyone could help me in finding reporting tools for Active directory


    Friday, September 30, 2011 3:17 AM


All replies

  • Hi,

    There are various 3rdparty tools available.. check out Quest( popular one)..  I found this one from microsoft but never tried it. http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=17717 

    I heard there is a program called RAP  which will help you to monitor,assess risks and everything, for this you need to contact MS.

    Regards, Mohan R Sr. Administrator - Server Support
    Friday, September 30, 2011 3:28 AM
  • Hello,

    You can use eventcombmt, there are so many in built search is present, like FRS/Sysvol/AD/DNS.

    That is the part of account lockout tool.

    Try it, you can monitor AD/DNS/Sysvol health


    If you want to export all users attributes

    Dsquery * -limit 0 -filter "&(objectClass=User)(objectCategory=Person)" -attr * >>output123.txt


    Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin
    • Edited by bshwjt Friday, September 30, 2011 3:54 AM
    • Proposed as answer by allwyn_cap Sunday, November 11, 2012 12:02 PM
    Friday, September 30, 2011 3:48 AM
  • Can you give us some more information on what you are trying to report on?  

    If you are trying to check the health of your dcs then dcdiag, repadmin, and event logs are a good place to start.  Depending on your version of Windows there are also tools to troubleshoot FRS or DFSR issues.

    If you are trying to report on users/computers/counts.  There are tools like powershell, ADUC, csvde, adfind (free third party), adinfo (free third party) and the dstools.

    If you are trying to get a drawing of your AD you can download the free AD toplogy diagrammer. http://www.microsoft.com/download/en/details.aspx?id=13380

    ADRAP is usually done by a PFE, you can run the adrap scoping tool before an engagement if you have a contract with Microsoft   http://www.shariqsheikh.com/blog/index.php/200907/adrap-scoping-tool/





    http://twitter.com/mekline Twitter
    Friday, September 30, 2011 3:50 AM
  • Hi,

    a very good ad documentation tool is josé.

    You find the download here: http://www.faq-o-matic.net/2011/07/06/jos-version-3-1/

    The only problem for you is that the tool is in german but I think you should take a look and perhaps you can still use it.

    Perhaps bing translation can help you. 


    Martin Forch
    Friday, September 30, 2011 4:48 AM
  • Are you looking for real time monitoring tool or health checkup tool. Event viewer can be used to find the issues in the DC's.

    DCDIAG is best tool to analyze the health of the AD, Repadmin for monitoring replication, DNSlinit for DNS etc.

    What does DCDIAG actually… do?


    For GPO AGPMC(Advanced group policy management console), GPinventory etc can be used.

    For FRS/DFSR, you can use FRSDIAG tool, SONAR etc.



    For real time monitoring tool, you can use SCOM (System center operations manager)2007 R2, you can also have audit collection service with SCOM. 


    There are other 3rd party tools like Netwrix, Quest, Admanager plus etc.


    Awinish Vishwakarma

    MY BLOG:  http://awinish.wordpress.com

    This posting is provided AS-IS with no warranties/guarantees and confers no rights.
    Friday, September 30, 2011 5:54 AM
  • Hi,

    What are the activities you are looking to monitor. If you want Domain Controller Health Monitoring tool then you can check SCOM which will give you realtime monitoring

    If you are looking for the change reporting tools to monitoring what is getting changed in AD then you can check ARKAD and NETIQ. There are other tools like AD AUDIT Plus from Manage Engine, Quest but the tools mentioned below are very cheap compared to others. These may not provide you with very detailed report but will provide good amount of information.

    ARK For AD


    Net IQ Change Guardian


    Friday, September 30, 2011 6:01 AM
  • Hello,

    If you are looking for reporting on AD objects (users, groups, OUs, Exchange reports etc.) it can be accomplished through LDAP protocol. There are various handy 3-d party non-free tools (e.g. LDAP Administrator or LDAP Admin), but also there are free tools (e.g LDAP Browser is my favorite one).



    Friday, September 30, 2011 7:01 AM
  • THanks for all your replies...i am looking tool to get reports(users, groups, ou's , password policies, etc) from AD


    Friday, September 30, 2011 3:04 PM
  • You have plenty of choices for the users/groups/OU's in the responses above

    You can use GPMC to get reports of your policies.  There are also a number of scripts with GPMC that maybe helpful for reporting    http://wmug.co.uk/blogs/1972/archive/2006/05/01/39.aspx




    http://twitter.com/mekline Twitter
    Friday, September 30, 2011 3:09 PM
  • Hi all,

    Kashif412, You can download the free AD reporting tools from the Microsoft's website. If you want to try out the best third party tool, which can manage users, groups, OU's, workgroups, password policies, etc. Download the trial version of the latest version of LADMR , which has been launched a few days ago. Some new features which have been added are:

    Bulk user management, multiple computer management, multiple groups management, multiple services and jobs on bulk computers in a single go and some remote control features as well.

    Thank you


    Monday, October 3, 2011 5:07 AM
  • Hi,

    I agreee with above mentioned tools, however I would like to add one more tool for Active Directory Replication Status Tool.


    Hope this helps..

    Wednesday, June 20, 2012 12:41 AM
  • Hello,

    I translated José Active Directory Documentation 3.1 into English language. You can download from here (José created by Nils Kaczenski (ADDS - MVP) and He has himself written Free sharing allowed):

    José Active Directory Documentation 3.1 - Free Tool (en-US)


    Thursday, October 11, 2012 6:41 PM
  • Thanks Biswajith,

    You saved my day, I never thought it would been so simple.

    Besides I know bit of a excel work too... so it wasn't difficult to sort out the report.


    Allwyn Fernande - Mumbai

    Sunday, November 11, 2012 12:05 PM
  • AD Admin & Reporting Tool by LDAPSoft may be the best one. You can securely use it to connect to any domain and install it on your local machine or on a domain server. 
    Tuesday, January 22, 2013 4:35 PM
  • You can use AdSysNet Active Directory Manager. This tool provides reports for users, groups, computers, contacts and ous, also it supports bulk password reset, unlock, enable/disable, join/dis-join groups, move, delete, restore, send mail and more actions for the selected records in the generated reports. You can easily filter the objects which are protected or not protected from accidental deletion.


    Thursday, June 27, 2013 10:23 AM
  • Have a look at Adaxes - http://adaxes.com
    Thursday, June 27, 2013 3:39 PM
  • You can try the one we've developed at codevega.com. It's not as polished as others yet, but is very low cost and extremely good value. You can report on anything and has some features others do not, such as exporting directly into a Powershell or other script. We've also seen the command line version used for emailing daily reports of newly created Active Directory objects etc. It's called Active Directory User Reporter.

    • Edited by adminwiggins Thursday, November 14, 2013 11:02 AM Adding link
    Thursday, November 14, 2013 11:01 AM
  • This is the best active directory tool, we use Ad Admin & Reporting Tool for all our reporting needs. The best reports are the nested groups and nested members. Also the best part of this tool is I can see the latest nested assignment of the groups while assigning a group to a member. 

    The tool also comes with a lot of built in audit reports which are very easy to generate and also you can schedule them through windows scheduler. We cannot run any tool on our domain controller due to company policy but as the tool is being used by a lot of security establishments our security department give us the permission to install it on our domain controller. 

    Monday, March 17, 2014 4:59 PM
  • We use AD Admin & Reporting Tool by LDAPSoft and it is a great tool. The best feature of the product is nested group and user reports. 

    The other feature which I like about the tool which has removed the guess work is I can see the nested assignment while assigning groups to users. One click Audit report exports is also a great feature of the product. 

    • Edited by syed101 Tuesday, March 18, 2014 9:36 PM
    Tuesday, March 18, 2014 9:35 PM
  • Hi,

    Have a look at this topic http://www.reddit.com/r/sysadmin/comments/226feh/five_apps_for_active_directory_management/



    Wednesday, April 9, 2014 11:28 AM
  • There is a tool ADCore Admin that allows flexible reporting and editing.  The Show Groups option allows quickly showing group membership by all sorts of filters in a simple grid format.


    • Proposed as answer by PermissionMe Sunday, January 3, 2016 6:45 PM
    • Unproposed as answer by PermissionMe Tuesday, February 23, 2016 3:32 PM
    Tuesday, December 16, 2014 12:49 PM
  • thank you for the dsquery
    Saturday, January 31, 2015 3:54 PM
  • Hi,

    there is a tool to create AD Reports with just a few clicks: FirstWare-AD Inspector. (Freeware)
    The tool is free and helps you with basic reportings (currently 17).
    What you can do is:

    • Analyze users, computers, contacts, Passwords, groups
    • Config some of the reports
    • Export to CSV or Excel (xlsx)



    Wednesday, September 9, 2015 1:18 PM
  • The link is http://www.permissionme.com/Products/ADUCCoreAdmin.aspx or just www.permissionme.com
    Sunday, January 3, 2016 6:46 PM
  • Site has been updated and here is current link


    Tuesday, February 23, 2016 3:36 PM
  • If someone is looking for it in 2017, I can recommend this AD reporting tool - AD FastReporter (https://albusbit.com/ADFastReporter.php).

    You can get reports from 8 categories - users, computers, groups, Exchange, contacts, GPO, OU. More than 200 built-in reports.

    All can be exported to CSV, XLSX, HTML files.

    Tuesday, November 28, 2017 9:16 AM
  • Try to visit offical site for AD tools
    Monday, December 10, 2018 6:37 AM