SysAdminTools Desktop
A free Windows companion app that runs the tools a browser can't — local disks, network devices, NTFS permissions, Active Directory, and event logs.
SysAdminTools Desktop
v1.8.0FreeA native Windows toolkit for the tasks that can't run in a browser. It installs as a lightweight Windows service and opens a fast local web UI — use it on the machine itself or across the LAN. Self-contained: no separate .NET install required.
What's inside
Machine dashboard
OS, hardware, memory and per-disk usage of the host at a glance.
Patch manager
Every pending update on the machine in one place — applications via winget and Chocolatey, plus Windows Update for OS patches, drivers and Defender definitions. Update one app or a batch, with per-app results and CSV export. Nothing is selected or installed on its own, and it never reboots the machine.
Storage scan
Fast folder-size tree for local disks and UNC network shares — tree, treemap, top files/folders, diff, and export.
Network scanner + map
Ping-sweep a CIDR, resolve hostnames/MAC/vendor, port-scan, classify each device, and draw a logical network map.
SNMP topology
Map several subnets at once from LLDP/CDP neighbour tables and switch bridge tables — devices with their IP and model, end hosts on the port that learned them. Anything alive but not answering SNMP becomes a ranked work list with vendor-specific instructions for switching it on. Gateways are mined for their ARP and address tables, which identifies hosts on subnets you can't reach and finds networks you didn't know to scan.
Lockout investigator
Find why an AD account keeps locking out — pinpoint the source computer from Event 4740, read the failed-logon pattern, unlock, and scan a PC for stale credentials (with one-click fixes).
LAN speed test
Measure throughput to another machine — over an SMB share or a direct peer connection.
Permissions reporter
Audit NTFS owners and ACLs; flag broken inheritance, broad 'Everyone' grants, and orphaned SIDs.
AD reporter
Privileged group members, inactive users, locked accounts, password expiry, stale computers and more (domain-joined machines).
Event log analyzer
Scan the Application/System/Security logs and surface ranked, explained problems — bugchecks, disk errors, service crashes, failed sign-ins.
How it works
- Installs a Windows service that hosts the UI locally (default
http://localhost:5280/), plus a tray icon to open it. - Two modes, auto-detected: Client (storage & network tools) and Domain (adds AD, permissions and multi-server tools) on domain-joined machines.
- Everything runs on your machine — no data leaves your network. Export any report to CSV.
Release notes
v1.8.0
2026-09- SNMP topology reworked against a real network — scan several subnets in one run, pick targets from your own subnets or recent scans, and watch progress with a live log you can cancel.
- Every device reports what it actually contributed to the map, and anything alive that doesn't answer SNMP becomes a work list — grouped by device family with vendor-specific instructions for enabling SNMP and LLDP, ranked so the switches that build a map come first.
- Routers and firewalls are mined for their ARP and address tables: hosts on subnets you can't reach get identified, and networks nobody typed in get discovered.
- The map now shows each node's IP and model, with end hosts drawn on the switch port that learned them.
- A /24 scan went from minutes of dead waiting to well under a minute.
v1.7.0
2026-09- Patch manager — see every pending update on a machine and install it: applications through winget and Chocolatey, and the operating system through Windows Update (patches, drivers, Defender definitions).
- Update a single app or a batch, with per-app progress, per-app results and CSV export. A run keeps going if you close the page.
- Machines without winget (most Windows Server installs) get a one-click App Installer setup.
- Nothing is ever selected or installed on its own, and the app never reboots the machine — a pending restart is reported and left to you.
v1.6.0
2026-08- Lockout Investigator — pinpoint the source of AD account lockouts, unlock, and scan a PC for the stale credential that's doing it.
- SNMP network topology — discover managed switches and draw device-to-device links (LLDP/CDP) with end hosts on their access ports.
v1.5.0
2026-07- Added the Event Log Analyzer — ranked problems from the Application/System/Security logs with plain-English advice.
v1.4.0
2026-07- NTFS Permissions Reporter.
- Network Scanner device classification and a logical network map.
v1.3.0
2026-07- AD Reporter with eight read-only Active Directory reports.
- Sidebar shows Domain-only tools only on domain-joined machines.
v1.2.0
2026-07- Storage Top-files filter bar (extension, size, date, regex).
- Installer reliability fixes for service install and upgrades.
v1.0.0
2026-07- First release: machine dashboard, storage scan, network scanner, LAN speed test.