Windows Active Directory Login vs ADtoolkit

This app requires the mobile device (phone or tablet) owner to login to the Windows domain (active directory) from the mobile device before files can be copied onto the mobile device from the Windows computer they attached the mobile device to (via a USB cable)

AD Toolkit is a fast, secure helpdesk companion for Active Directory administrators. Reset passwords, unlock locked accounts, and look up user details from your iPhone — without firing up Remote Desktop or finding a Windows machine. Built for IT teams who need to handle off-hours password calls, traveling admins, and on-call rotations. KEY FEATURES • User search by username, employee ID, or full name • Account unlock with one tap • Password reset — generate a strong random password or set a custom one • Multiple server profiles for staging, production, or multiple customer tenants • Per-profile credentials, switch instantly from Settings • Face ID / Touch ID / device passcode protection on every launch • Re-locks on backgrounding so a peeked phone shows nothing SECURITY • HTTPS-only — plain HTTP is rejected at validation time • Bearer tokens stored in iOS Keychain with WhenUnlockedThisDeviceOnly accessibility — never copied to iCloud or device backups • Session token is invalidated immediately on logout • Privileged accounts (Domain Admins) automatically have destructive actions disabled REQUIREMENTS This app talks to the open-source AD Toolkit PHP backend running inside your network. You will need: • An AD Toolkit server installed on a Windows host that can reach your domain controllers • An HTTPS endpoint (any valid TLS certificate) • An AD account with delegated permissions for password reset and unlock The backend is a separate open-source project — see the GitHub link in Settings. OPEN SOURCE Both the iOS app and the server are MIT-licensed. Audit the code, host it yourself, or fork it for your environment. Links in Settings. WHO IT'S FOR • Helpdesk technicians who get password reset calls all day • Sysadmins on call after hours • Managed service providers supporting multiple tenants • Schools, hospitals, and small IT teams running on-prem AD WHAT IT'S NOT • Not a cloud service — your data never touches our servers • Not a SaaS product — there's no subscription, no telemetry, no analytics • Not a replacement for Group Policy or full AD management tools