free tools

The joeware utilities... Saving administrators around the world time and frustration for over twenty years...

All joeware utilities have a very simple warranty which you can find here.

Please feel free to use these tools as you like, if you do something cool with them, let me know, I like hearing what things people find to do with them.

For each utility I try to keep a current list of what platforms it will or won't work on. The mapping for the symbols are + for runs, - for doesn't run, and † for it runs but not perfectly. The last is specific to Windows Server 2008 and is due to the granular password policy. If the granular password policy is not being used, you will have no issues. If you are using the granular policy the results will be incorrect.

CSV file with utility versions, release dates, and MD-5/SHA-1 Digests

Note about digests.

Already know the name of the tool you want? Use these Quick Links.
AccExp AdFind AdMod AdQueueLoop ATSN Auth ChangePW ClientTest CPAU DNSSrvRec ELDLL ELDLLEx ExchMbx Expire FindExpAcc FindNBT FindPDC GCChk GetUserInfo LG MachinePwd MemberOf NetSess OldCMP QLogOff Quiet PSOMgr rdp-sec-check SecData SecTok SeInteractiveLogonRight ShrFlgs SidToName SNU SVCUtil Unjoin Unlock UserDump UserName W2KLockDesktop WriteProt

active directory specific tools

AdFind

Command line Active Directory and ADAM LDAP query tool. DSQuery on steroids and existed long before DSQuery.

[+2K][+XP][+K3][+Vista][+Windows7][+K8]

AdMod

Command line Active Directory and ADAM LDAP modification tool. This tool combines DSMod, DSRM, and DSMove plus even more such as clearing SIDHistory, CSV updates, moving objects between domains, and much much more that would normally require scripts.

[+2K][+XP][+K3][+Vista][+Windows7][+K8]

AdQueueLoop

Command line Active Directory tool to display the replication queue in near real time.

[+2K][+XP][+K3][+Vista][+Windows7][+K8][-ADAM]

ATSN

Command line Active Directory tool to return site and subnet info for given IP addresses.

[+2K][+XP][+K3][+Vista][+Windows7][+K8]

ExchMbx

Command line tool that can do various Exchange Active Directory related tasks like mailbox or mail enabling objects.

[+2K][+XP][+K3][+Vista][+Windows7][+K8][+E2K][+E2K3][(Unknown)E2K7]

FindExpAcc

Command line Active Directory tool to locate accounts that are expired or have expired passwords. Can also be used to determine accounts that will expire in X days. Returns basic info such as email address, etc. Useful for scripts to notify users of impending password expirations.

[+2K][+XP][+K3][+Vista][+Windows7][†K8]

GCChk

Command line Active Directory tool that attempts locate lingering objects. Can detect issues that you will not find with repadmin lingering object check.

[+2K][+XP][+K3][+Vista][+Windows7][+K8]

MachinePwd

Command line Active Directory tool to fix broken secure channels between a member machine and the domain. Can also be used to force a member machine to change its machine account password and reset a secure channel.

[+2K][+XP][+K3][+Vista][+Windows7][+K8]

MemberOf

Command line Active Directory tool to enumerate group memberships of given user.

[+2K][+XP][+K3][+Vista][+Windows7][+K8]

OldCmp

Command line Active Directory tool to find old user and computer accounts. Try it, you will almost certainly love it.

[+2K][+XP][+K3][+Vista][+Windows7][†K8]

PSOMgr

Command line tool to manage Password Settings Objects in Longhorn Active Directory.

[+2K][+XP][+K3][+Vista][+Windows7][+K8]

SecData

Command line Active Directory tool to dump security info for users and computers.

[+2K][+XP][+K3][+Vista][+Windows7][+K8]

Unlock

Command line Active Directory tool to find and unlock locked user accounts.

[+2K][+XP][+K3][+Vista][+Windows7][†K8]

UserName

Command line tool to output current user's DN as well as other userid formats.

[+2K][+XP][+K3][+Vista][+Windows7][+K8]

misc tools

AccExp

Command line tool that allows you to expire or check expiration on user accounts. Note that this is account expiration, not password expiration.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

Auth

Command line user account authentication test tool.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

ChangePw

Command line password set/change utility.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

ClientTest

GUI tool that allows you to do simple TCP/IP port connection testing.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

CPAU

Command line tool that allows you to launch a process as another user similar to RUNAS only with encrypted job files.

[+NT][+2K][+XP][+K3][(sort of)Vista][(sort of) Windows 7][(sort of) K8]

DNSSrvRec

Command line user utility that allows you to add/remove arbitrary DNS SRV Records.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

ELDLL

A DLL that contains basic resource info for customized event logging.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

ELDLLEx

Similar to ELDLL only it is implemented with 2 DLLs so that message IDs under 200 can be used.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

Expire

Command line tool to force account passwords expired.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

FindNBT

Command line tool to scan a subnet(s) looking for Windows PCs.

[+2K][+XP][+K3][+Vista][+Windows7][+K8]

FindPDC

Command line tool to find the PDC of a domain and test it to make sure it is responding to NetLogon requests.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

GetUserInfo

Command line tool to retrieve info about user accounts from Windows machines.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

LG

Command line local group manipulation tool similar to but much more powerful than the NET LOCALGROUP command. Works remotely.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

NetSess

Command line session enumeration tool similar to but much more powerful than the NET SESSIONS command. Works remotely.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

QLogOff

Command line tool to log off.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

Quiet

Command line tool to silently launch a process.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

SecTok

Command line tool to display parts of the process token of current process.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

SeInteractiveLogonRight

Command line tool to configure system to allow specific user/group to logon locally.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

ShrFlgs

Command line tool for setting Share flags.

[+2K][+XP][+K3][+Vista][+Windows7][+K8]

SidToName

Command line tool to resolve SIDs to friendly display names.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

SNU

Command line tool to connect to network shares.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

SvcUtil

Command line tool to view basic service information as well as stop/start/pause/continue service.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

Unjoin

Command line tool to unjoin machine from domain.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

UserDump

Command line tool to dump basic user info from NT Based systems.

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

W2KLockDesktop

Command line tool to lock the desktop immediately

[+NT][+2K][+XP][+K3][+Vista][+Windows7][+K8]

WriteProt

Command line tool to write protect disk volumes in Windows XP/2003 or later operating systems.

[+XP][+K3][+Vista][+Windows7][+K8]

Director of Research and Development