ASN Active Directory Manager
Comprehensive bulk AD management — create, modify, delete and report on users, groups, computers, contacts, OUs and more across unlimited domains from one install.
Active Directory User Reports
User General Reports
This category provides general user reports like all users, active users, disabled users etc. in the domain, OU or group.
All Users
All the users in the selected doman, OU or group are listed in this report. By default, built-in users are skipped, but they can be included by the setting in options.
Active AD Users
Lists all the active users in the given CSV or selected container like domain, OU or group. The users having the useraccountcontrol attribute as 'AccountDisabled' are skipped in this report.
Locked Out Users
Lists the users that are locked out currently because of the consecutive bad password attempts. The bad password count and bad password time are also shown in the result.
User Password and Logon Reports
This category gives reports about user password and logon reports. To keep the Active Directory clean and secure, it is important to query the inactive users, password expired users periodically. These reports help administrators clear the obsolete users.
Password Expired Users
Reports the users whose password got expired. In the result table, 'Password Expires On' column shows the expiry date of the password. To calculate the expiry date, maxPwdAge attribute of the domain is used.
Users Password Never Expires
Lists all the users who have set their password to never expire. Password never expires option is useful for service accounts but for normal users it is a security threat, so finding such users helps administrators to correct this.
Users Not Logged In For Last N Days
This report lists all the users who have not logged in for the last N days. The 'lastLogonTimestamp' attribute is used to calculate the last logon time. This attribute is replicated across all domain controllers (with 14 days lag), so it's efficient for finding inactive users.
Users Logged In For Last N Days
This report gives lists of users who have logged in last N days. This helps to find the active users in the domain recent days.
User Account Status Reports
This category provides reports based on the user account status like account expired, account expiring soon, account locked etc.
Account Expired Users
Lists all the users whose account has expired. The 'accountExpires' attribute is used to determine if the account is expired or not.
Account Expiring Soon (in N days)
This report lists all the users whose account will expire in the next N days. This helps administrators to proactively extend the account expiry date or notify users.
User Group Membership Reports
List users based on their group membership properties.
Users in Group(s)
Lists the users who are members of the specified group(s). It can also check for nested group membership if the option is selected.
Users Not in Group(s)
Lists the users who are not members of the specific group(s). This is useful to find users missing from required policy groups.