Development update · October 18, 2026

AD lab testing passed.
Building toward release.

AD Access Review's full portable pilot package has passed testing in an isolated Active Directory lab. Independent feedback, wider validation and self-service release preparation are next.

v0.2.0 internal pilot · No public toolkit download, purchase link or release date yet.

Current stage: internal pilot. The lab milestone is complete. Independent first-use acceptance, broader compatibility and commercial release gates remain open.

Implemented in v0.2.0

The working review workflow.

Read one on-premises AD domain, inspect the collected evidence and record human review decisions. The toolkit does not modify accounts.

COLLECT

Guided, read-only reporting

A console menu, local prerequisite/output checks, a fictional demo and live account/group collection. Collection failures and coverage gaps remain visible.

UNDERSTAND

Account and group context

Account state, inactivity-review indicators and direct, nested and primary-group relationships. Selected privileged-group paths support investigation within the stated scope.

REVIEW

A local evidence package

HTML, structured JSON, eight CSV files including a reviewer worksheet, and a file-hash manifest. Preserve the original evidence and record decisions in a separate worksheet copy.

Completed testing

Completed checks and their scope.

Passed in one lab

Live AD collection as a standard reader

Fifty comparisons passed for the defined fictional fixtures, including enabled/disabled accounts, direct/nested/primary membership, distribution-group paths, cycles and excluded computer members. The expected Partial status kept the exclusion visible.

Passed in one lab

The full portable pilot package

The original 27-file ZIP was extracted and exercised as a non-administrator. Twenty package/failure checks passed, including controlled connection failure, denied output and altered-package rejection. Five report manifests were independently verified.

Automated checks passed

Application and release safeguards

The latest suite passes 90 checks on each Windows PowerShell 5.1 and PowerShell 7 engine: 28 core, 22 workflow, 7 command-line, 14 packaging and 19 release-record checks. These are synthetic/mocked tests; they do not mean every release gate is approved.

Preparation complete

Worksheet copy and tester handoff

A programmatic fictional worksheet roundtrip retained eight rows and fourteen columns while the original evidence still verified. Updated first-session instructions and a short feedback form are prepared. A person's spreadsheet import/save/reopen review is still needed.

These results apply to defined inputs and a defined environment.

Lab validation used Windows PowerShell 5.1 and one small Windows Server 2025 AD domain. One lab does not establish production readiness, all Windows/RSAT combinations, all effective permissions, or representative directory performance.

These are pilot validation results, not a public-release approval. Independent first-use testing and distribution acceptance remain open.

Current focus & next steps

Make the first release useful and dependable.

Prepared · feedback next

A first session without hand-holding

The guide starts with fictional data, explains collection status and shows how to preserve evidence before editing a worksheet copy. The next step is independent feedback on whether the workflow is understandable and useful.

Planned refinement

Clearer report instructions

The usability review identified confusing empty-results wording and the need to put worksheet-copy guidance earlier in the report. Those application-text changes are planned; the updated guide already explains the current behavior.

Validation still open

Broader directory coverage

Three historical/future-login timestamp scenarios remain untested against real AD; offline tests cover their logic. Wider compatibility, restricted reads, child domains, multi-DC behavior and representative scale also need suitable authorized test environments.

Drafts prepared · approval ahead

A self-service delivery path

Support proposals and a payment/download checklist are drafted. Supported scope, distribution/signing, license, support/refund/update terms and verified protected delivery must be finalized. No checkout or customer download is active.

The next milestone is a release candidate another person can use independently.

There is no announced launch date or finalized public price. A lab pass, an automated pass and a human review answer different questions; each stays visible in the release process.

Beyond the first product

Focused automation remains the direction.

AD Access Review is the built internal pilot. These separate areas remain future plans and are not included as available tools.

PLANNED · NOT BUILT

Server health checks

Routine Windows Server observations in clear, repeatable reports.

PLANNED · NOT BUILT

Certificate monitoring

Certificate inventory and expiration visibility for administrators.

FUTURE DIRECTION

Automated security assessments

Potential identity and configuration reviews with findings for human investigation.

Explore the output today

See the review format for yourself.

The sample contains fictional accounts. The free guide and blank templates help you plan a review without installing the pilot or sharing directory data.

Jacobs IT Solutions builds self-service IT software and automation. This is not a managed IT, phone-support or remote-administration offer.