Runs entirely on your network — no cloud, no telemetry

Active Directory administration, without leaving your domain.

Users, computers, groups, and LAPS passwords — managed from one signed, offline-activated desktop tool. Built for IT teams who need real AD work done fast, and nothing phoning home while they do it.

1license, unlimited machines
0cloud dependencies
Ed25519signed activation
Select Destination OU
CONTOSO.COM
OU=Corporate Workstations
OU=Finance-WKS42 objects
OU=Engineering-WKS118 objects
OU=Corporate Users
OU=ActiveUsersverified
// what it does

Everything a helpdesk-to-sysadmin team touches in AD, in one window.

Not a script collection. A single tool with the guardrails your directory actually needs — scoped moves, audit logging, and confirmation on anything destructive.

Users & groups

Add/remove from groups, unlock, enable/disable, move between OUs — searchable pickers instead of hand-typed DNs.

Computers & LAPS

Move, enable, disable, delete workstations, and retrieve LAPS passwords — legacy and modern Windows LAPS both supported.

Bulk operations

Paste, import CSV, or multi-select from a picker — move or delete a batch of computers with one confirmed action and a results log.

Scoped by design

Restrict which OUs are even reachable for moves and enable/disable — so a helpdesk build can't wander into Domain Admins.

Every action logged

Who, what, when, and the result — written to a shared log, with automatic local fallback if the network drops.

Activate once, done

One signed license file per organization. No seat counting, no per-machine limits, no license server to keep alive.

// the actual interface

Real screenshots. Nothing dressed up for the website.

Three tabs, one window — user & group operations, computer & LAPS operations, and bulk actions. Click a tab below the same way you would in the app.

User & Group
Computer
Bulk Computer Ops
Active Directory Manager — User & Group tab showing group membership and account operations Active Directory Manager — Computer tab showing move, delete, enable/disable, and LAPS password retrieval Active Directory Manager — Bulk Computer Ops tab showing the batch computer list and bulk move/delete actions

User & Group tab — group membership, account unlock/enable/disable, and moving users between OUs.

// why it's safe to run

Nothing leaves your domain that isn't supposed to.

This is a desktop tool that talks to your domain controller and nothing else. There's no vendor server in the loop for it to work.

Fully offline activation

A signed .lic file, verified locally against an embedded public key. No license server, no internet requirement to run.

Encrypted local credentials

Saved admin credentials are Fernet-encrypted on disk — never stored or transmitted in plaintext.

Confidential attributes over LDAPS

Password resets and LAPS retrieval use an encrypted channel, matching what AD itself requires for confidential attributes.

Idle session timeout

Saved passwords clear automatically after inactivity, forcing re-authentication before any further changes.

// pricing

One license. Every machine in your organization.

No per-seat counting. No subscription to babysit.

Perpetual license
$185 one-time

Priced per organization, not per machine or per admin.

  • Unlimited machines within your organization
  • Own it outright — no recurring fee
  • Legacy & modern Windows LAPS support
  • Offline activation, no ongoing internet requirement
  • Free updates within your major version
Buy Now

Not ready to buy? Try it for two weeks.

$25 / 14 days

Full functionality, same signed activation, just a 14-day license instead of perpetual. Fill in your details below to request one.

We'll send payment instructions, then a signed 14-day .lic file to the email above.