NetTools is a free AD troubleshooting tool, which provides the ability to troubleshoot, query, report and update Active Directory and other LDAP based directories.  It includes over 80 different features to help with AD troubleshooting, including a powerful and feature rich LDAP client with over 280 predefined LDAP queries.

Some of the features in NetTools

NetTools

NetTools

NetTools is a single executable that doesn't require any installation, which makes it ideal for field based troubleshooting.

shield-ok@96px

Access Control

Options for viewing and troubleshooting Active Directory permissions.

window-arrange-horizontal@96px

AD Sites

Options include AD Site Browser, overlapping subnets, DC lists, site coverage, IP address allocation

share@96px

AD Replication

Capability to test and view AD Replication, Replication Queues, Replication Cursors, Meta Data, and DirSync

certificate@96px

Authentication

View Kerberos tickets, test SPN registrations, Identify token bloat issues, SID History management, Sessions, User Rights and more

user-group@96px

Groups

Group management, view server's local group membership, check for infinite loops, group compare

user-group-certificate@96px

Group Policies

GPO Explorer allows you to view policies, settings, WMI filters, and policy allocations in the domain

button-info@96px

Information

A couple to NetEnum functions to display user and server information

database-network@96px

LDAP

A feature rich and powerful LDAP Client, LDAP Browser, and compare LDAP Objects, over 280 predefined LDAP Queries

gears@96px

Schema

The ability to browser the AD Schema and structure, view schema update history, and AD & Exchange schema versions

contacts@96px

Name Resolution

A number of options to test name resolution, include DcGetDCName, and test common AD ports are open or blocked

computer-server@96px

Network

A number of options to display HTTP headers, Geo IP, Trace Route, Ping, WhoIs, URL and UNC Checkers

sitemap@96px

Trusts

Options to display the details of the trusts that exist in the AD forest

user-group@96px

Users

User search, troubleshooting for locked accounts, Org structure, and the history of groups changes for a user

archive-box

Miscellaneous

A number of additional features, Windows error codes, ASN.1 Viewer, Base64 and time converters, SID Name resolver and AdminSDProp reporter.