NetTools is a free Active Directory troubleshooting tool, which provides the ability to troubleshoot, query, report and update Active Directory and other LDAP based directories.  It includes over 90 different features to help with AD troubleshooting, including a powerful and feature rich LDAP client with over 280 predefined LDAP queries.

Some of the features in NetTools

NetTools

NetTools is a single executable that doesn't require any installation, which makes it ideal for field based troubleshooting.

shield-ok@96px

Options for viewing and troubleshooting Active Directory permissions. Including comparing permissions, and displaying effective permissions.

window-arrange-horizontal@96px

Options include AD Site Browser, overlapping subnets, DC lists, site coverage, IP address allocation

share@96px

Capability to test and view AD Replication, Replication Queues, Replication Cursors, Meta Data, and DirSync

certificate@96px

View Kerberos tickets, test SPN registrations, Identify token bloat issues, SID History management, Sessions, User Rights and more

user-group@96px

Group management, view server's local group membership, check for infinite loops, group compare

user-group-certificate@96px

GPO Explorer allows you to view policies, settings, WMI filters, and policy allocations in the domain

button-info@96px

A couple to NetEnum functions to display user and server information

database-network@96px

A feature rich and powerful LDAP Client, LDAP Browser, and compare LDAP Objects, over 280 predefined LDAP Queries

gears@96px

The ability to browser the AD Schema and structure, view schema update history, and AD & Exchange schema versions

contacts@96px

A number of options to test name resolution, include DcGetDCName, and test common AD ports are open or blocked

computer-server@96px

A number of options to display HTTP headers, Geo IP, Trace Route, Ping, WhoIs, URL and UNC Checkers

sitemap@96px

Options to display the details of the trusts that exist in the AD forest

user-group@96px

User search, troubleshooting for locked accounts, Org structure, and the history of groups changes for a user

archive-box

A number of additional features, Windows error codes, ASN.1 Viewer, Base64 and time converters, SID Name resolver and AdminSDProp reporter.