Active Directory User Reports with AD Pro Toolkit

Description

AD Pro Toolkit makes it easy to generate detailed Active Directory user reports in just a few clicks. Get details user reports, export to csv, excel or pdf and schedule automated reports.

How to Run User Reports

1. Click Reports > User Reports
2. Select a report and click the run button.

List of included User Reports

Report	Description
All Users	All user accounts in the domain
Account Expired	Users with expired accounts
Account Expires Soon	Users whose accounts expire within 30 days
Change Password At Next Logon	Users required to change password at next logon
Dial-In	Users with dial-in/VPN access enabled
Hidden From Address List	Users hidden from Exchange GAL
Inactive Users	Users who haven’t logged on in 90+ days
Kerberoastable Accounts	Users with SPNs set (Kerberoast risk)
Locked Out Users	Currently locked out user accounts
Logon Hour Restrictions	Users with logon time restrictions
Logon Workstation Restrictions	Users restricted to specific workstations
Managed Service Accounts	Group and standalone managed service accounts
Never Logged On	Users who have never signed in
Password Expired	Users with expired passwords
Password Last Set Date	Users sorted by when password was last changed
Password Not Required	Users where password is not required (UAC flag)
Primary Group	Users with non-default primary group
Privileged Groups	Members of privileged AD groups (Domain Admins, etc.)
Privileged Non-Expiring Passwords	Privileged users with passwords set to never expire
Recent Password Changes	Users who changed passwords in the last 30 days
Recently Created Users	Users created in the last 30 days
Recently Deleted Users	Deleted users in the AD recycle bin
Recently Logged On Users	Users who logged on in the last 30 days
Recently Modified Users	Users modified in the last 30 days
Reversible Password Encryption	Users with reversible encryption enabled
SID History	Users with SID history (migrated accounts)
Soon To Expire Passwords	Users whose passwords expire within 14 days
Stale Privileged Accounts	Privileged users inactive for 90+ days
True Last Logon	Accurate last logon by querying all DCs
Bad Password Attempt Details	Bad password attempts queried from all DCs
Unconstrained Delegation	Users trusted for unconstrained delegation
User Account Control	Users with specific UAC flags set
User Group Membership	All groups a specific user belongs to
User Membership Summary	Group membership count per user
User Password Details	Detailed password policy info per user
Users By Department	Users grouped by department
Users Can’t Change Password	Users who cannot change their own password
Users In Domain	All users filtered by domain
Users Not In Group	Users not a member of a specific group
Users Password Never Expires	Users with non-expiring passwords
Users Per OU	User count per organizational unit
Users SID	Users with their security identifiers
Users With Home Folder	Users with a home folder configured
Users With Logon Script	Users with a logon script assigned
Users With Manager	Users with a manager assigned
Users With No Groups	Users not a member of any group
Users With Old Password	Users who haven’t changed password in 90+ days
Users With Password Expiry	Users with password expiration dates
Users With Photo	Users with a photo stored in AD
Users With Profile Path	Users with a roaming profile configured
Users Without Home Folder	Users without a home folder
Users Without Logon Script	Users without a logon script
Users Without Manager	Users without a manager assigned
Users Without Photo	Users without a photo in AD
Users Without Profile Path	Users without a roaming profile
Admin Count Orphans	Users with adminCount=1 but not in privileged groups

|