Skip to content
DirectoryOpsby TOMORIS
Customer account
DE EN
Try it free

Features

Everything ADUC does. Just readable.

Release 1 reads: safely, quickly and understandably. Every feature on this page is either proven in the lab or explicitly marked as “in progress”.

Try it free Risk assessment
  • Proven in the lab122 automated checks against a test directory with 12,055 objects and domain controllers running 2019 and 2025.
  • 249 ADUC functions openly ratedThe parity matrix states for every function whether it is there, in which release it comes, or why not.
  • Nothing on the DCsA Windows application on the admin workstation. No server, no agent, no service account.

Release 1

What runs today

All screenshots come from our test lab dolab.test, not from a graphics program.

Release 1

Choose your target explicitly

You pick the domain and domain controller yourself, from the directory's DC list with site, operating system and RODC flag. The banner permanently shows where you are working.

  • Classification production, test or unclassified, each in its own colour
  • Identity as seen by the DC, not by the workstation
  • LDAP with Kerberos, signed and sealed, or LDAPS; no silent DC switch, no referral chasing
  • Functional levels, operations masters and trusts in plain language
Connection dialog in the test lab: domain dolab.test, list of domain controllers with site and operating system, classification test.Connection dialog in the test lab: domain dolab.test, list of domain controllers with site and operating system, classification test.
Release 1

The structure you know, only faster

The tree shows the domain, OUs and containers. Each level loads only when expanded, with a single query. Where you lack rights, you see a note instead of an empty list.

  • “Advanced features” as in ADUC, if you want them
  • Column picker per saved search
  • Keyboard shortcuts for everything important, usable without a mouse and with screen readers
Structure tree in the test lab with site OUs and the expanded OU Vienna.Structure tree in the test lab with site OUs and the expanded OU Vienna.
Release 1

Find things, even with 100,000+ objects

Free text via ANR, search base, scope, filter by object type or your own LDAP filter. Large directories load page by page; you see the progress and can cancel.

  • Incomplete results are marked as such, never silently truncated
  • Saved searches and favourites via objectGUID, even after a move
  • CSV export of the selected columns, without secret attributes
Search across 12,000 users in the test lab, loaded page by page, with the result count.Search across 12,000 users in the test lab, loaded page by page, with the result count.
Release 1

Attributes you can read

Times as dates, flags as words, SIDs and GUIDs readable, multi-values complete. For each attribute the hint from the schema and the DC's answer whether you may change it.

  • Search in names and values
  • Password, LAPS, BitLocker, gMSA and all attributes marked confidential in the schema are not even requested
Attributes of Anna Huber in the test lab, formatted readably; secret attributes marked as not requested.Attributes of Anna Huber in the test lab, formatted readably; secret attributes marked as not requested.
Release 1

Delegation in plain language

Per OU: who may do what, set directly or inherited, with its origin. No dsacls, no looking up GUIDs.

  • Roles per OU and OU templates as a preview: target versus actual, with export to CSV or HTML
  • Apply and undo are in progress and so far run only in the test lab
Delegation of the OU Vienna in the test lab: three deliberately set rights of the helpdesk group in plain language.Delegation of the OU Vienna in the test lab: three deliberately set rights of the helpdesk group in plain language.
Release 1

Risk assessment with TOMORIS Secure Score

130 own rules at the push of a button, in four categories with risk value, maturity level and the TOMORIS Secure Score from 0 to 100, plus the trend. For every finding: what was found, why it matters, the evidence and the remediation as a script with backup and undo.

  • For example unconstrained Kerberos delegation, orphaned AdminSDHolder entries, accounts with non-expiring passwords
  • The basis for the risk assessment further down
Risk assessment in the test lab: TOMORIS Secure Score, categories, findings by severity and on the right explanation, evidence and remediation.Risk assessment in the test lab: TOMORIS Secure Score, categories, findings by severity and on the right explanation, evidence and remediation.
Release 1

Signed updates, offline too

If you wish, DirectoryOps checks once a day for a new version and installs only after your click. Alternatively via an internal share or as a file. Company policy takes precedence.

  • Signature of the version file, SHA-256 of the package and publisher are checked before installation
  • Downgrades are refused

Update policy via GPO

Update page in DirectoryOps: mode, source and channel, note about the company policy.Update page in DirectoryOps: mode, source and channel, note about the company policy.

Release 1 · in progress

Risk assessment and TOMORIS Secure Score

The design check becomes an assessment: an overall score, a score per category and every finding with its reasoning. This feature belongs to Release 1 and is in progress.

Release 1 · in progress

How it works

  • TOMORIS Secure Score from 0 to 100, overall and per category: privileged accounts, Kerberos and delegation, passwords, stale objects, permissions, domain controllers
  • Every finding with affected objects, reasoning and test method, traceable instead of a black box
  • Remediation straight from DirectoryOps: preview first, then execution with an audit log, undoable at any time (Pro)
  • Exceptions with justification, history over time and mapping to MITRE ATT&CK, CIS and NIS2 (Pro)
  • Report for management and auditors, with a watermark in Community
72 OUT OF 100
  • Privileged accounts58
  • Kerberos and delegation66
  • Passwords81
  • Stale objects74
  • Domain controllers88
Illustration with sample values · feature in progress
Risk assessment by edition
FeatureCommunityProMSPConsultant
TOMORIS Secure Score overall and per category✓✓✓✓
All findings with a short text✓✓✓✓
Reportwith watermark, one domainwith your logo, all domainswith your logo, all domainsWhite label
History, scheduled scans, exceptions–✓✓–
MITRE ATT&CK, CIS, NIS2–✓✓✓
Remediation with preview, audit log and undo–✓✓only with the customer's Pro licence
Useown organisationone forestcustomer tenantscustomer assessments

In progress

What comes next

These features are not part of Release 1. We announce dates once they are fixed.

What DirectoryOps is not

Not a backup and recovery tool, not a change audit, not a self-service portal and not an Exchange management tool. Release 1 does not have 100 % parity with ADUC; the parity matrix names every gap.

Done with dsa.msc. See clearly from today.

Community is free with no time limit. Try Pro free for 30 days, offline via licence file.

Try it free See pricing