Dovestones AD Reporting vs LTB Self Service Password

Dovestones AD Reporting automates Active Directory audits, scheduled reports, and account-management tasks on Windows. Its pre-built and custom reports cover users, passwords, computers, and groups, with detailed account status and ways to identify when users or computers were last used. It can also run one-off queries, such as finding computers that have not been used recently.

A built-in scheduler can run reports and bulk changes in the background. Available actions include moving, deleting, or disabling redundant accounts and removing users from sensitive groups. Reports can be emailed, printed, or exported, and the product supports command-line operation. The manual says installation requires no server components or agents and no changes to Active Directory, though installation adds a Windows service for scheduled jobs. Listed requirements are Microsoft .NET Framework 4.5 and Windows 7 or Windows Server 2008 R2 or later. The product has a trial version, and support is listed by phone and email.

LTB Self Service Password is a PHP web application that lets users change or reset passwords in LDAP directories, including standard LDAPv3 directories and Active Directory. Password resets can rely on security questions, an emailed token, or SMS through an external Email 2 SMS service or SMS API. Administrators can configure checks for length, character classes, forbidden characters and words, password reuse, entropy and breached-password status using the Have I been pwned API. Other features include CAPTCHA, password-change email notices, and scripts that run before or after a password change. Users can also update their SSH key, email address and phone number in LDAP. A REST API is available. The free, GPL-3.0-licensed software is self-hosted. Documented installation routes include a tarball, Debian or Ubuntu packages, CentOS or Red Hat packages, Docker and Git for developers. Prerequisites include PHP 7.4 or later, required PHP extensions, Smarty 3 or later, configured mail and sessions, and LDAP connectivity. The project directs software questions to its mailing lists and bug reports to GitHub issues.