

Overall this is a fantastic tool and one I'll be using when the MS technotes require delving into some obscure key via ADSIEdit. It's also a great way to see how many differences accumulate between your production and test active directory environments. Doing this shows just how many changes occur in the AD in just a few days. One very nice feature this tool has is the ability to take a snapshot of an Active Directory and compare it to another snapshot. I suspect the only thing that AD users and computers can do (or do better) that this tool cannot are password changes, logon hour restrictions and limiting logon ID's to specific computers. It allows viewing, searching and editing of the AD in ways that are far superior to Active Directory Users and Computers. The first one is AD Explorer and it's from sysinternals and it's exactly what it says, a explorer tool for Active Directory. AD Explorer is a part of Sysinternals tools. I did consider buying a lottery ticket that evening! SAFE rating from user kajmik for file D:UtilsADExplorer.exe (Variant: 803333). Last week I had the good fortune to stumble upon two such applications right at the time when I needed them most. The best method to determine the appropriate setting for the AD Group Distinguished Name field can be found by using the Sysinternals AD Explorer tool. Sometimes it's possible to stumble upon a tool and wonder just how you would have gotten a task accomplished without it.
