£19 one-time purchase, instant download
AD Health & Security Audit: know your domain’s real health score
A PowerShell tool that scans your Active Directory domain and turns stale accounts, unreviewed admin groups, weak password policy and orphaned Group Policy Objects into one interactive report, scored 0 to 100.
Runs from any domain-joined Windows machine with the Active Directory PowerShell module (RSAT). Read-only, nothing leaves your network.
Video Demo
See the scan, the score and the findings table, start to finish.
Everything a real domain audit needs, scored in one place
Nine checks, weighted into one number, so a couple of minor findings never reads the same as a domain riddled with critical issues.
Stale account detection
Finds user and computer accounts nobody remembered to disable, aged by last logon.
Privileged group drill-down
Domain Admins and the other privileged groups, with every member listed, not just a headline count.
Password policy review
Checks the default domain policy and any fine-grained password policies against modern practice.
Password-never-expires check
Flags accounts set to never expire their password, a common and overlooked hygiene gap.
Orphaned GPOs
Finds Group Policy Objects that are unlinked or broken, cluttering the domain for no reason.
0 to 100 health score
One number for the whole domain, weighted so it reflects severity, not just finding count.
Filterable findings table
Sort and filter every finding by category or severity, search by name.
Self-contained report
One HTML file. No install, no internet connection, no server needed to open it. Email it, print it, hand it over.
Fully customisable
Set your own or your client’s branding, the stale-account threshold, and where the report is saved, all from the command line.
See it in action
Real screenshots from a real test domain, not a mockup.
Who it’s for
One report, three different people who need it.
MSPs and consultants
Run it against every client domain and hand over a report they can actually read, no translating required.
Internal IT and sysadmins
A health check for your own domain before an audit, a migration, or just because nobody has looked in a while.
Compliance and security reviewers
A quick, evidence-backed starting point before a deeper security review.
Requirements
Operating system
Any Windows machine that can reach the domain. Does not need to run on a domain controller.
Rights
A domain account with standard read access to Active Directory. The scan never writes anything.
Download
Delivered instantly after checkout, from your account on this site.
Prerequisites
The Active Directory PowerShell module (RSAT) and PowerShell 5.1 or later.
Version
1.0, released 8 September 2026.
Licence
For the purchasing individual or organisation, including running it for your own clients. Not for resale or redistribution. Full terms in the included LICENSE.txt.
Frequently Asked Questions
Does it need to run on a domain controller?
No. It runs from any domain-joined Windows machine with the Active Directory PowerShell module installed, and reads the domain remotely.
Will it change anything in my Active Directory?
No. It is entirely read-only. It queries your domain and writes a report, and nothing else.
Can I use it for more than one client, as an MSP?
Yes. The licence covers running it for your own organisation and for your own clients, as part of the work you do for them. It is not for resale or redistribution as a standalone download.
Do I need to install anything to view the report?
No. The report is a single self-contained HTML file. Open it in any browser, no internet connection or server needed.
Can I set my own branding on the report?
Yes. Branding, the stale-account threshold and the output location are all set with command-line parameters, covered in the instructions included with the download.
Is there a subscription?
No. It is a one-time purchase of £19. You keep the tool and can run it as often as you like.
Version History
- 1.0: 8 September 2026. Initial release.
Get your domain’s real health score
Delivered as an instant download after checkout. Full instructions included.
Questions before you buy?
Ask first
Not sure it covers what you need? Get in touch before you buy and we’ll tell you straight.
Instructions included
Full setup and command-line reference is included in the download, no separate documentation to hunt for.