Active Directory Users and User Management Resource Administrator Software for Windows

Inactive Users for Active Directory
$59 - Absolute Dynamics

Identify, move and disable inactive users in your Active Directory Domain. All domain controllers are scanned for the lastLogon data, so you you can be sure the days of inactivity are accurate. Users that have never logged on are also indentified. Flexible search filters allow you search by name and/or container. Easy to automate using command line parameters.

---

---

Inactive Users Tracker
$0 - NetWrix Corporation

Many corporate security policies require that Active Directory user accounts must be disabled after 31 days of inactivity. This is a good practice; doing so keeps Active Directory secure and clean. For example, someone can create a user account, leave it untouched for many days, and then use it to perform malicious activity against an organization. Another example is employee retirement: User accounts are usually disabled when an employee quits an organization. Most HR databases only keep information about "primary" user account, but what if a user had additional user accounts?

Inactive Users Tracker automates the management of inactive user accounts. The program periodically checks all user accounts in specified domains, reports to you, and automatically disables all accounts inactive for more than a specified number of days.

This product has two important features:
- Checks all users in your domains and reports those accounts that have been inactive for a specified number of days.
- Automatically disables user accounts based on inactivity.

To detect inactivity, the tool checks the "lastLogon" attribute of every account, which represents the last time a user was authenticated by a specific DC. AD doesn't replicate this attribute; as a result, the lastLogon value will be different on each DC. Inactive Users Tracker handles this correctly: It queries all DCs in the domain and uses the most recent logon time, also called the "true last logon".

Inactive Users Tracker is provided free of charge for unlimited use by organizations and individuals.

---

---

Active Directory Janitor
$199.95 - Special Operations Software

When Active Directory has been in use for a while you will have a growing problem with outdated computer and user accounts that do not correspond to real physical computers or users anymore. With Active Directory Janitor you can search the entire network to easily identify these computer accounts. You can then decide, from a number of criteria, which ones that are outdated and finally move, delete or disable them. The result is a nice, clean and accurate Active Directory once again. Features: Easy to use standard Windows graphical interface. Choose among 35 properties (18 NEW properties in 2.0) when scanning your network environment. Pick user (NEW in 2.0) or computer accounts to scan in three different ways: Manually, from Active Directory and import. Delete, disable, move (NEW in 2.0) and enable Active Directory accounts in seconds. Export all or part of your scan results. Identify user accounts with high security risk (NEW in 2.0). For the non-replicated account properties all domain controllers will be contacted and the most recent value will be used.

---

Directory Mate
$999.99 - MADSolutions

Directory Mate is a wizard based import/export tool for your Windows 2000 or 2003 Active Directory. Quickly export a list of users, open the comma delimited file in Microsoft Excel, make the changes you want and quickly import all your changes. Quick, painless and efficient. Not to mention, easy enough to use that once you've used it a couple times it will seem like child's play. Price listed is for one Microsoft Active Directory domain license. Contact us for additional licenses or for volume discounts.

---

Password Expiration Notifier
$0 - NetWrix Corporation

Password expiration is a quite frequent cause of many IT support issues. Passwords that are not changed within required timeframes can cause disruptions of critical services and productivity losses.

NetWrix Password Expiration Notifier is the application that periodically checks users in specified Active Directory domains and sends report to the administrator's e-mail when one or more passwords are about to expire. Only those users whose passwords will be expiring in a specified number of days will be reported. Armed with this tool, administrators can proactively resolve password expiration issues.

The tool can also notify users whose passwords will expire soon by sending personal e-mails to account owners. Windows notifies users automatically during interactive logon, but in some cases-for example, when users have AD accounts only for Microsoft Outlook Web Access (OWA)-users would never actually log on by using the AD account.

NetWrix Password Expiration Notifier is provided free of charge for unlimited use by organizations and individuals.

---

User Management Resource Administrator
$249 - Tools4ever

Overview:
Use the flexibility of scripting without requiring the effort or knowledge. Perform advanced user management tasks for NT and Active Directory such as automated user creation, mass assigning Microsoft Exchange mail boxes or folder permissions. User Management Resource Administrator offers advanced features such as pre-configured scripts, automated error handling, complex user name-password generation and built-in job simulation tools.
Visual Scripting:
User Management Resource Administrator doesn't require any knowledge of scripting languages such as VBScript or Perl, nor will you ever have to write a single line of code when using it. We have essentially created actions involved in user resource management as building blocks, where you would normally see a separate function or module inside a script.
Network Browse Overview:
The integrated Active Directory and NT network overview browser lets you simply test the results of your import projects. Even more powerful, using the network overview you can directly perform user update operations on your Active Directory or a single Organizational Unit without requiring input from a CSV file.
Script Actions:
User Management Resource Administrator has more than enough built-in script actions to provide advanced functionality for handling Active Directory domains, user accounts, groups and Organizational Units, file systems with shares and folder permissions, Terminal Server settings, folder and data migration, all with built-in error handling and logging with requiring any configuration.
Field mapping and formatting:
User Management Resource Administrator's ability to perform mass operations such as automated user and home directory creation, or mass assigning Microsoft Exchange mail boxes, largely depend on how data from an import CSV file is processed. Script actions, such as Create User (AD) need input such as first name and last name to perform the actual operation.

---