This open source application is typically used by help desk analysts and active directory administrators as part of their daily account, contact and group management tasks.
Corendal Directory is a good alternative to the Active Directory console for daily uses and acts as well as an enterprise directory where users can manage their password. You can export bulk data from Active Directory to Excel in seconds. Since it's a web application, it can be used remotely from anywhere.
Active Directory administrators who have installed Corendal Directory have reported it is a "very powerful and useful application".
This is a solution superior to commercially-available software, you have access to the entire code, you can customize the application to your Active Directory standards.
Received in October 2011: "I want to first thank you for your effort in making a great tools for admins. I am with a small group [...] and we found your directory application as the one that makes the most sense after evaluating other GNU or commercial applications that serves similar purposes. The corendal directory app is versatile and effective, users are able to pickup on using it without much help from the admins."
Corendal Directory can be downloaded from the Downloads page.
All users have access to the following features:
An option (disabled by default) allows users to edit the memberships of groups they own,
In addition to the features accessible to all users, help desk analysts and active directory administrators have access to the following features:
Active directory administrators can perform mass account updates using a simple 3 steps process:
All updates to accounts, contacts and groups are logged.
Access rights are fined-grained. For example, you can allow only a small group of users to update logins, while granting the entire help desk the permission to edit the building and room attributes. You can define proxies. You can also protect sensitive groups against updates.
NTLM can be used to authenticate users automatically. You can limit NTLM authentication to ranges to IP addresses. Users outside of the defined NTLM range authenticate through a form with their regular active directory credentials.
The layout of the application uses Velocity templates and can be adapted to your graphic standards without any modification to the code.
This is a real-world application that is used every day to manage thousands of accounts, contacts and groups. It is implemented in Java, and can be backed by a MySQL database or an Oracle database.
Installation instructions are available.