AD FastReporter - Online Manual

System Requirements

AD FastReporter is a Windows desktop application (WPF). It runs on any domain-joined workstation that meets the requirements below. No server installation is needed — you install it on your own PC and it queries Active Directory over the network.

Operating System

Windows 10 (version 1607 or later) or Windows 11. On server editions, Windows Server 2016 or later is supported.

Both x64 and ARM64 architectures are supported.

.NET Runtime

AD FastReporter requires the .NET 10 Desktop Runtime (not the older .NET Framework).

If the runtime is not already installed, AD FastReporter will prompt you to download it on first launch. You can also install it ahead of time:

  1. Go to the .NET 10 Desktop Runtime download page
  2. Download the Desktop Runtime installer for your platform (x64 or ARM64)
  3. Run the installer

To verify the runtime is installed, open a command prompt and run:

dotnet --list-runtimes

Look for a line starting with Microsoft.WindowsDesktop.App 10.0.x.

Active Directory

AD FastReporter needs network access to an Active Directory domain:

  • The workstation must be domain-joined (or you must supply explicit credentials for a trusted domain)
  • The user account running AD FastReporter needs read access to the AD objects you want to report on. Standard domain user permissions are sufficient for most reports. Some specialized fields (like BitLocker recovery keys) require additional permissions.
  • LDAP access (TCP port 389) to at least one domain controller
  • For cross-forest or universal group queries, Global Catalog access (TCP port 3268) is also used
  • If you plan to report on non-replicated attributes like lastLogon (as opposed to lastLogonTimestamp), AD FastReporter queries each domain controller individually. Network access to all DCs improves accuracy for these fields.

Disk Space

AD FastReporter stores its configuration, custom report forms, and generated reports in a local SQLite database at:

%ProgramData%\AlbusBit\ADFastReporter\adfastreporter.db

The database starts small (under 1 MB) and grows as you store generated reports. If you regularly generate and store large reports (thousands of records), the database can grow to tens or hundreds of megabytes over time. You can manage this by periodically deleting old reports from the History view, or by disabling the “Save reports with results” option in Settings.

Scheduled task export files are written to the path you configure in the task definition, so plan disk space accordingly if you automate daily exports.

Email (Optional)

If you want to send reports by email (either manually or as part of scheduled tasks), you need access to an SMTP server. Configure the SMTP settings under Settings → Email in the application. AD FastReporter supports SMTP with or without SSL/TLS authentication.

Permissions Summary

Action Required permissions
Install AD FastReporter Local administrator (for installer)
Run AD FastReporter Standard domain user
Query AD objects Read access to target objects in AD
Report on BitLocker recovery keys Read access to msFVE-RecoveryPassword objects in AD
Create Windows scheduled tasks Local administrator, or “Run only when user is logged on” (no elevation needed)
Export reports to file Write access to the target folder
Send email Network access to SMTP server


Use of this site constitutes acceptance of our Privacy Policy and EULA. Copyright © Albus Bit SIA