ADtoolkit

iPhone / Economie et entreprise

AD Toolkit is a fast, secure helpdesk companion for Active Directory administrators. Reset passwords, unlock locked accounts, and look up user details from your iPhone — without firing up Remote Desktop or finding a Windows machine.

Built for IT teams who need to handle off-hours password calls, traveling admins, and on-call rotations.

KEY FEATURES
• User search by username, employee ID, or full name
• Account unlock with one tap
• Password reset — generate a strong random password or set a custom one
• Multiple server profiles for staging, production, or multiple customer tenants
• Per-profile credentials, switch instantly from Settings
• Face ID / Touch ID / device passcode protection on every launch
• Re-locks on backgrounding so a peeked phone shows nothing

SECURITY
• HTTPS-only — plain HTTP is rejected at validation time
• Bearer tokens stored in iOS Keychain with WhenUnlockedThisDeviceOnly accessibility — never copied to iCloud or device backups
• Session token is invalidated immediately on logout
• Privileged accounts (Domain Admins) automatically have destructive actions disabled

REQUIREMENTS
This app talks to the open-source AD Toolkit PHP backend running inside your network. You will need:
• An AD Toolkit server installed on a Windows host that can reach your domain controllers
• An HTTPS endpoint (any valid TLS certificate)
• An AD account with delegated permissions for password reset and unlock

The backend is a separate open-source project — see the GitHub link in Settings.

OPEN SOURCE
Both the iOS app and the server are MIT-licensed. Audit the code, host it yourself, or fork it for your environment. Links in Settings.

WHO IT'S FOR
• Helpdesk technicians who get password reset calls all day
• Sysadmins on call after hours
• Managed service providers supporting multiple tenants
• Schools, hospitals, and small IT teams running on-prem AD

WHAT IT'S NOT
• Not a cloud service — your data never touches our servers
• Not a SaaS product — there's no subscription, no telemetry, no analytics
• Not a replacement for Group Policy or full AD management tools