Active Directory Explorer v1.0 is a free new Sysinternals tool from Microsoft. It allows you to view and edit the Active Directory database. The utility is similar to ADSIedit from the Windows Server 2003 Support Tools. It offers two useful additional features: You can create snapshots and you can bookmark AD objects.
- Midnight Commander remote connect via Shell link (copy files over SSH) and SFTP link using FISH and public key authentication - Mon, Jan 17 2022
- Root login via SSH and SFTP on EC2 instances running Linux - Wed, Jan 12 2022
- Poll: Will you deploy Windows 11 in 2022? - Mon, Jan 10 2022
The latter feature is quite helpful, if you have to edit the same object frequently. Active Directory Explorer allows you to add favorites for this purpose.
Creating a snapshot of the AD database can be done with just a mouse click. This is fast and easy compared to creating snapshots with ntdsutil in Windows Server 2008. However, as far as I know, you can't use the snapshots created with Active Directory Explorer as backup. You only can browse and search in those snapshots.
It is also possible to compare two snapshots. This is useful if you want to know which changes have been made to the AD database by an application, for example. You can restrict the comparison to certain objects and attributes. Unfortunately, AD Explorer doesn't allow you to save or to export the output.
Subscribe to 4sysops newsletter!
AD Explorer has one major shortcoming compared with ADSIedit. It seems one can't modify attributes with empty values. If Bryce Cogswell and Mark Russinovich add this feature in the next version of this nifty utility, you won't need ADSI Edit anymore.