Does AD FastReporter require installation on a domain controller?
No. AD FastReporter runs on any domain-joined Windows workstation. It queries Active Directory over the network using LDAP — no server installation, no agents, and no changes to your domain controllers are needed.
What .NET version does AD FastReporter require?
AD FastReporter requires the .NET 10 Desktop Runtime (not the older .NET Framework). If it’s not installed, AD FastReporter will prompt you to download it on first launch. See System Requirements for full details.
Does AD FastReporter require schema changes to Active Directory?
No. AD FastReporter is read-only — it queries AD using standard LDAP and never modifies your directory or schema.
What is the difference between the Free and Pro editions?
The Free edition lets you generate and view all 250+ built-in reports across 8 categories (Users, Computers, Groups, Exchange, Contacts, Printers, GPOs, OUs). The Pro edition adds export to 8 file formats, custom report forms with filters, scheduled automated reporting with email delivery, charts, the NIS2 compliance dashboard, and priority support. See the comparison table on the introduction page.
Can AD FastReporter report across multiple domains or forests?
Yes. Create a separate connection for each domain in Settings → Connections and switch between them using the connection dropdown. Cross-domain connections require a trust relationship or explicit credentials valid in the target domain.
What export formats does AD FastReporter support?
AD FastReporter Pro exports to 8 formats: Excel (XLSX), CSV, CSV (append), HTML, PDF, XML, ODS (OpenDocument Spreadsheet), and JSON. See Exporting Reports for details on each format.
Can I automate report generation?
Yes. AD FastReporter Pro includes a task scheduler that integrates with Windows Task Scheduler. Define what to report, where to export, who to email, and when to run — tasks execute automatically via the command-line tool ADFastReporterCmd.exe.
Can I add custom Active Directory attributes to reports?
Yes. You can add custom fields by specifying the LDAP attribute name, data type, and which report categories it applies to. This lets you report on schema extensions, third-party attributes, or any AD attribute not included by default.
How does AD FastReporter handle the lastLogon attribute?
The lastLogon attribute is not replicated between domain controllers — each DC only records logons it handled directly. AD FastReporter queries each accessible DC individually and returns the most recent value, giving you accurate last logon data that a single LDAP query would miss. This is different from lastLogonTimestamp, which is replicated but with up to a 14-day delay.
Can AD FastReporter report on deleted Active Directory objects?
Yes, if your AD forest has the Recycle Bin feature enabled (Windows Server 2008 R2+). AD FastReporter can include deleted objects in reports using the isDeleted attribute.
Can I report on BitLocker recovery keys stored in AD?
Yes. AD FastReporter can report on BitLocker Password ID, Recovery Key, and Volume Name stored in Active Directory. This requires read permissions on msFVE-RecoveryPassword objects under computer accounts — standard domain users typically don’t have this access. See Special Reporting Capabilities.
Does AD FastReporter support Exchange attributes?
Yes. If your AD forest has Exchange schema extensions, AD FastReporter can report on mailbox settings, protocol status (OWA, POP3, IMAP4, MAPI), recipient types, Exchange server assignment, and delivery restrictions through the dedicated Exchange report category.
Where is the report database stored?
AD FastReporter stores its data in a local SQLite database at %ProgramData%\AlbusBit\ADFastReporter\adfastreporter.db. No data is sent to external servers — everything stays on your local machine.
Does AD FastReporter send any data to the internet?
AD FastReporter checks for software updates on startup (this can be disabled in Settings). License validation requires a brief connection. No Active Directory data or report results are ever transmitted externally.
Does AD FastReporter support NIS2 compliance?
Yes. AD FastReporter Pro includes a NIS2 compliance dashboard with pre-built reports covering inactive accounts, orphaned accounts, privileged group auditing, password policy compliance, service account reviews, and more. It also tracks compliance events with 24-hour notification deadline management and automated email alerting.
Is AD FastReporter a one-time purchase or a subscription?
AD FastReporter Pro is a one-time purchase with a perpetual license. You pay once and use it indefinitely. The purchase includes 12 months of updates and support, which can optionally be renewed. See pricing.
Can I try the Pro features before purchasing?
Yes. Request a free trial to receive a trial license key that unlocks all Pro features for the trial period.