AD Tidy Free Edition
Last updated
Identify and clean up inactive user and computer accounts in your Active Directory domain
Install with winget
$ winget install --id Cjwdev.ADTidy.Free --exact --version 2.6.1Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
For Intune admins
Stop chasing app updates. Pckgr patches them for you.
Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.
Start free 30-day trialNo credit card required.
About
Search your Active Directory domain for user/computer accounts that are no longer in use by filtering based on last logon time, DNS record timestamp, and much more. You can then perform a number of actions on the accounts that were found - such as moving them to another OU, disabling them, setting a random password, removing them from all groups, and much more.
Features
- Report on both user and computer accounts
- Search entire domain or select a specific OU
- Multi-domain friendly - specify any domain and optionally use alternate credentials to connect to it
- Get account last logon information from all DCs or select specific DCs (using either lastLogon attribute or lastLogonTimeStamp attribute)
- Choose to only find accounts that have not logged on for a specified number of days
- Confirm whether or not computer accounts are still active by using the Ping test and DNS record timestamp check
- Powerful filtering capabilities let you filter results accounts based on name, group membership, expiration date, LDAP attribute, and more
- Export report results to CSV or Excel XLSX file
- Save report settings to file so that you can reload them whenever you want or share them with colleagues
- Option to reverse actions that were previously performed (Standard Edition only)
- Command line support and Automated Rules allow for automation of account clean up tasks (Standard Edition only)
For any accounts that are found in the report, you can perform one or more of the following actions:
- Disable
- Delete
- Move To Another OU
- Set Description
- Set Expiration Date
- Add To Group
- Remove From Group
- Remove From All Groups
- Hide From Exchange Address Lists
- Delete home drive
- Clear LDAP Attribute Value
- Run External Script
- Set Random Password
- Disable OWA
- Set Password To Never Expire
You can also combine any of these actions into an Action Sequence to speed up common clean up tasks such as disabling accounts and moving them to another OU at the same time. Action sequences can be performed manually on any selected accounts, or by automated rules and command line scripts.
Installers · v2.6.1
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.
Security
No known CVEs for AD Tidy Free Edition.
Coverage is best-effort and depends on a winget package mapping to an NVD CPE entry. Absence here is not a guarantee of safety.
Related apps
- AD Account Reset ToolCjwdev
Cjwdev.ADAccountResetToolv1.4.6A simple tool that allows helpdesk technicians or non admin users to quickly unlock and reset passwords for user accounts without having to use the full AD Users & Computers MMC tool (assuming they have been delegated the required permissions).
- NTFS Permissions Reporter Free EditionCjwdev
Cjwdev.NTFSPermissionsReporter.Freev3.1.1A tool for reporting on NTFS permissions across multiple directories and servers. Produce a report of all permissions or filter results to show only locations that match specific criteria, such as locations that only a specific user or group has access to.
- AD Photo Edit Free EditionCjwdev
Cjwdev.ADPhotoEdit.Freev2.6.1A user friendly program for uploading photos into a user's (or contact's) thumbnailPhoto attribute in Active Directory. The images in this attribute are used by Outlook 2010 and several other new Microsoft products to display images of users.
More from Cjwdev or browse active-directory, ad.