Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What are good AD management tools for AD forests with less than 1000 users and 3 domains across three locations?

Specifically looking for: -Bulk users creation -Security groups management -Performance monitoring


share|improve this question

closed as off-topic by Michael Hampton Feb 21 '14 at 3:39

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions seeking product, service, or learning material recommendations are off-topic because they tend to become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – Michael Hampton
If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 4 down vote accepted

For that size, how about just built-in and other free Microsoft tools? Like add users with dsadd, security groups with ADUC, and perfmon? Plus some good ol' scripting?

share|improve this answer

ADManager Plus from MangeEngine is a very useful and richly featured application that is accessed via a web browser. We're using it in our organisation (15k+ users accounts, 4 domains, worldwide locations) and it has helped to reduce manual overhead, managed rights delegation, and much more.

It's also multi-domain aware, and the dashboard (with all the AD statistics and charts) is really handy too. Also, it offers a user Self Service portal to allow users to update their own details (all controlled by you) in case their contact details change etc.

They offer a 30-day trial, and even a usable online demo (click on Administrator Demo, Help Desk Users demo, or Self Service Portal demo)

Bulk User Workflow

share|improve this answer

Bulk users creation

dsadd from a script, or ldifde, csvde

Security groups management

What do you need to "manage" that the built-in or RK tools (ADUC, dsadd, dsmod, etc) don't provide?

Performance monitoring

You don't really monitor performance of AD. You can monitor the health of AD with tools like nltest, dcdiag, Ntdsutil, replmon, as well as reviewing your system and application logs from time to time. A central logging server is a good idea to aid with this. You can monitor the performance of your DCs (or any of your servers) with built-in tools like perfmon, or add-ons ranging from SCOM to HPOV, or vendor-specific tools like IBM Directory, HP SIM, or a generic free tool like MRTG using SNMP.

share|improve this answer

Adaxes Active Directory management solution from Softerra.

It completely fulfills your requirements and has more useful features. Detailed information on the product you can find on their site, there are demo videos and screen shots on how to use the tool and its specific features.

The tool is accessed via a web browser. They offer a reliable support and educational/government/non-profits discounts. You can download Adaxes and use it 30 days for free.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.