IT-Service Walter Windows AD Toolsby IT-Service Walter
PRODUCT CATALOGUE 2026 · 66 TOOLS

Tools for Windows Active Directory

Active Directory under control – and everything that depends on it.

Audit and manage accounts, groups, permissions, tier model, Kerberos, NTLM and Group Policy properly – plus tools for PKI, Exchange, security and compliance – with audit-proof PDF and HTML reports, AES-256 encryption and no cloud dependency. Your data stays with you.

66
Tools
.NET 10
Modern WPF interface
30+
Years of MSP practice
7
Subject areas

One standard runs through all 66 tools.

No tool is an island. What holds for one holds for all of them.

.NET 10 & WPF

A modern, native Windows interface. No browser shell, no runtime zoo to install.

Audit-proof reports

PDF and HTML reports that stand up in an audit – traceable and exportable.

AES-256 encryption

Credentials and configurations are stored encrypted with AES-256 throughout.

No cloud dependency

On-premises operation. No registration, no telemetry. Your data stays on your network.

Made in Germany

Developed in Euskirchen – out of more than 30 years of managed-service practice.

Protected concepts

Our software is protected by copyright; parts of the underlying technical concepts are subject to industrial property rights or their examination.

All 66 tools at a glance

Search by product name, technology or standard – for example “Kerberos”, “DKIM”, “NIST” or “LAPS”.

Active Directory & Identity Management

13 tools

AD Account Guard v3.0

Automatically detect, warn about and disable inactive user accounts – including password expiry warnings by e-mail.

AD ACL Auditor

Detect domain and forest takeover paths in a single run – usable as evidence for BSI, ISO 27001 and GDPR audits.

AD Group Lifecycle Manager

Time-limited memberships, deprovisioning rules, attestation and drift detection with a hash-chain audit trail.

AD Migration Tool

Migrate users, groups, contacts and entire OUs between domains – backup and restore in a single click.

AD Password Rotator

BSI-compliant rotation for service accounts and privileged accounts – with audit log, SQL Server and gMSA integration.

AD Tier Model Manager

Roll out tiering in clearly separated phases – based on AD, GPO, Windows LAPS and authentication policy silos.

AD User Attribute Manager

Analyse, filter, edit and export user attributes – including reconciliation with HR records.

ADVital

Check for stale accounts, weak policies, unsafe delegations and missing LAPS – aligned with BSI and NIST CSF.

PAM JIT Manager

Local administrator rights for a limited time only – with ticket reference and tamper-proof logging.

Compliance Mandatory Check Professional

Verify mandatory and optional AD group memberships – for both computer and user compliance.

gMSA & MSA Management Tool

Manage managed service accounts conveniently instead of relying on error-prone PowerShell cmdlets.

Local Admin Auditor

Read, evaluate and document every member of the local administrators group across the whole network.

SPN Manager

Keep service principal names for Kerberos authentication in Active Directory clean and under control.

Group Policy & Configuration

6 tools

ADMX Registry Explorer 2.0NEW

Discover, analyse and directly apply the hidden registry keys behind group policies.

Auditpol Manager Pro

Control Windows audit policies clearly – with reporting and best-practice recommendations based on international standards.

GPO Analyzer Pro 4.1NEW

Automatically identify configuration problems, security risks and compliance violations across your GPO infrastructure.

Group Policy Backup & Restore Manager

Back up and restore group policies completely – including links and WMI filters.

Gruppen & GPO Security Filtering Manager

Manage AD group memberships and synchronise security filtering between GPOs.

Security Configuration Manager

Automatically audit and harden Windows security settings against CIS Benchmark, BSI Grundschutz and NIST CSF.

PKI & Certificates

7 tools

ADCS Auditor

Systematically audit Active Directory Certificate Services for misconfigurations and attack paths.

CA Operations Manager Pro 4.0NEW

Remotely operate a Microsoft certification authority – from request and approval through to revocation, fully auditable.

CA Backup, Restore, Migration & Health

Back up, restore and migrate AD CS servers – with a graphical interface and command-line support.

Certificate Inventory Manager

Inventory certificates and private keys network-wide – from computer and user stores as well as loose files on disk.

Certificate Manager Pro

Centrally manage and monitor SSL/TLS certificates from internal and external domains.

CSR & Certificate Manager

Create and convert CSRs for SSL/TLS, S/MIME and code signing, and build certificate chains.

TLS Schannel Configurator 2.5NEW

Configure TLS protocols, cipher suites and Schannel settings safely and traceably.

Protocol Audits – Kerberos, NTLM & SMB

4 tools

Kerberos Audit Analyzer Pro

Kerberoasting, AS-REP roasting, unsafe delegations, outdated encryption and krbtgt – benchmarked against CIS and BSI.

NTLM Audit Analyzer

Master the three-phase NTLM shutdown and the RC4 Kerberos block coming in April 2026 with confidence.

SMB Dialect Auditor

See first, enforce second: switch off SMB1 and set minimum dialects without breaking a single connection.

SMB Security Analyzer 2.0NEW

Analyse every SMB share in parallel – a weighted overall score from 0 to 100 with concrete recommendations.

Exchange & E-Mail Security

11 tools

Exchange DKIM & ARC Signer 6.0

ARC sealing and Ed25519 keep legitimate e-mail trustworthy even after forwarding.

Exchange DKIM Signer 5.0 Pro

Quick status, DNS traffic light and real-time metrics: messages processed, success rate and signing time per domain.

E-Mail Security Analyzer

Check SPF, DKIM and DMARC comprehensively – headers and DMARC reports are processed 100 % locally.

SPF Record Generator & Analyzer

Create, analyse and optimise SPF records – for reliable e-mail authentication.

Exchange Configuration Analyzer

More than 72 queries give you the complete picture of every important configuration aspect of your Exchange system.

Exchange Mail Traffic Analyzer

Analyse mail flow and spot anomalies – transparency as the foundation for better security.

Exchange Message Tracking Tool

Query message tracking logs comfortably and follow messages from sender to recipient.

Exchange SMTP Security Analyzer

Identify anonymous SMTP connections on Exchange servers and uncover potential security gaps.

Exchange SMTP Tester

Test SMTP connections to Exchange and other mail servers quickly – before the helpdesk phone rings.

Exchange Mailbox Export Manager

Bulk-export Exchange mailboxes to PST – for migrations, archiving and compliance requirements.

Outlook Autodiscover Configurator

Define which autodiscover methods Outlook is allowed to use – without touching the registry by hand.

Security, Monitoring & Compliance

12 tools

ISW Grundschutz++ CockpitNEW

Open the BSI’s machine-readable OSCAL catalogues, make them searchable and carry them through to audit-proof evidence.

Security Advisory Dashboard v2.1NEW

BSI CERT-BUND, CISA KEV and FIRST.org EPSS combined into one priority metric – with asset monitoring and CSAF verification.

ISW Operations CenterNEW

Monitor, harden and maintain Windows environments from a single window – servers, clients and domain controllers.

CVE Scanner – NIST Database 4.7NEW

Automatically check installed software against the NIST National Vulnerability Database and detect CVEs.

Windows Patch Compliance Analyzer 2.0NEW

Prove agentlessly – via the Windows Update Agent API and WinRM – which updates are installed and what is missing.

Sysmon Analyzer Pro 7.0NEW

Analyse Sysmon event logs: real-time endpoint monitoring and forensic analysis of security incidents.

Network Communication Monitor

Active connections, listening services, DNS activity and anomalies per process in real time – a basis for NIS2 and ISO 27001.

Security Event Generator

Generate authentication events in the security log in a controlled way – without real attacks and without cloud services.

NIST 800-53 Compliance Companion

Systematically assess, manage and document security controls according to NIST SP 800-53 Revision 5.

PCI-DSS Collector

Collect evidence for PCI DSS audits automatically and prepare your certification in a targeted way.

DSGVO Off-Boarding Management

Close out departing employees in AD and Exchange in a GDPR-compliant way – automated and verifiable.

ISW Logon SentinelNEW

Centrally record logons from any number of domains and standalone servers, retain them audit-proof and report anomalies.

Server & System Management

13 tools

Remote Server Manager

Manage Windows servers centrally via PowerShell remoting (WinRM with and without SSL) – the alternative to Server Manager.

Scheduled Task Manager Pro

Manage Windows scheduled tasks centrally and remotely – instead of laborious one-by-one work over RDP sessions.

Server Session Manager

Monitor remote desktop sessions across multiple servers and sign users out individually or in bulk.

Windows Services Manager Pro

Manage, back up and restore Windows services – including advanced security settings.

Windows Service Remote Monitor

Monitor business-critical services and see what is running – before it stops running.

Windows Live-Ereignismonitor v4.0

Monitor event logs in real time – locally and remotely, with intelligent filters and extensive export options.

Windows Firewall Manager Pro 3.0NEW

Centrally manage, analyse and document firewall rules on one or many servers.

App Service Manager

Run Node.js servers, Python or PowerShell scripts and your own applications reliably as a Windows service.

WinRM Management Tool 2.0NEW

Set up WinRM services, HTTPS listeners, certificate bindings and firewall rules without the command line – domain or workgroup.

DNS Zone Manager 5.0NEW

Manage and automatically monitor Windows DNS servers efficiently – forward and reverse zones at a glance.

Static Route Manager

Manage the IPv4 routing table graphically instead of via route add or netsh.

NTFS Inspector

A complete NTFS inventory in seconds: MFT, cluster geometry, USN journal and six NTFS special features.

Windows Update Cleanup Manager

Clean up the component store (WinSxS) and the update cache centrally via WinRM – with a before/after report by e-mail.

Who it pays off for

  • IT administrators who run Active Directory, PKI, Exchange and Windows servers day to day and need a tool rather than a platform
  • MSPs and system houses that look after several customer environments and have to document their work reproducibly
  • IT managers and CISOs who need evidence for BSI IT-Grundschutz, ISO 27001, NIS2, NIST 800-53, PCI DSS or GDPR
  • SecOps teams that need concrete audit results – without rolling out a six-figure enterprise project
  • Public authorities and critical-infrastructure operators, for whom on-premises operation without a cloud connection is not a preference but a requirement

Contact & purchase

Talk to the developer directly – no sales funnel, no webinar gate. Usually an answer within one working day.

Availability
Monday to Friday, 8 am – 6 pm CET
Address
IT-Service Walter · Jörn Walter
Mittelstr. 65
53879 Euskirchen · Germany