Self-service Active Directory groups

Take group changes off IT's leash.

Leashless lets managers, office staff and team leads add and remove people from the groups they look after. It signs in with their Windows account, shows only the groups they're allowed to change, and asks them to review every change before it's saved. IT sets the boundaries once, and nobody waits on a help desk ticket again.

See pricing Look around the app

Windows 10 and 11 · Installs with one MSI · No server to set up

The Leashless main window for a demo company. A sidebar lists the 12 groups the signed-in person manages. The All Staff group is open, showing its member count, its team groups and its staff with their job titles and departments, plus buttons to compare, print, export and add people.
No password promptUses the Windows sign-in people already have
Free, within limitsNobody sees groups they can't change
Groups of any sizeFrom a team of 6 to all 5,000 employees
Light and darkFollows the Windows 11 theme setting

Features

Built for the person who gets the new-hire email

Someone starts Monday. Someone moves from Sales to Marketing. A contractor needs the project mailing list for three months. Leashless turns each of these into a two-minute job for the people closest to the team, instead of a ticket in IT's queue.

Signs in automatically

Leashless uses the account people already signed in to Windows with. No separate password to remember, reset or share.

Every group they manage, in one list

Groups appear when IT names the person as the group's manager, or gives them rights to a folder of groups. Nothing else shows up.

Find people the way you know them

Type a name, an email address or a username. Leashless finds the right person even when two people share a last name.

okafor · tokafor@alderfinch.example · tokafor

Paste a whole list from Excel

Copy a column of names or emails from a spreadsheet and paste it in. Leashless matches each line and flags anything it can't find before you add it.

Review before anything is saved

Adds and removals wait in a list of unsaved changes. Check them, undo the ones you didn't mean, then save them all at once.

History and CSV export

See who was added or removed and when. Export any group's members to CSV for a directory, an access review or an audit.

What's new

Less to keep track of

Four new ways to handle the jobs that used to mean a spreadsheet, a calendar reminder or a call to IT.

The Find a person page for Rosie Reid, a team coordinator. It lists the three groups the signed-in person manages that Rosie Reid belongs to, with Customer Support ticked and buttons to remove from 1 group or add to more groups.

Find a person

Look someone up and see every group you manage that they're in. When someone leaves or changes role, take them out of all of them at once.

The Ending soon page listing three temporary memberships with their end dates and days left, the nearest ending in 3 days. A note explains that Active Directory removes these people itself at the end of their last day.

Temporary membership

Give a contractor or temporary worker an end date when you add them. Active Directory removes them on their last day, and the Ending soon page shows who's due to leave.

The Compare groups page with Team Coordinators and Customer Support side by side in three columns: six people only in Team Coordinators, one person in both, and two only in Customer Support, with buttons to add the missing people to the other group.

Compare groups

Pick two groups to see who's only in one, who's in both, and fill the gaps in a click.

The print dialog for Customer Support, with a title field, a choice of columns such as job title and department, an option to add a blank signature column, and sort and group-by-department settings.

Print list

Print a clean member list for sign-in sheets, meetings or audits. Choose the columns, add a signature column, or save it as a PDF.

Who it's for

Any team that lives in Active Directory

If your groups control mailing lists, shared folders, Teams channels or app access, the people who know who belongs in them can keep them current.

Offices and firms

Office managers add new hires to department lists and shared drives on day one.

Healthcare

Charge nurses keep on-call and shift groups accurate as rotations change.

Schools and districts

Front office staff move teachers between grade-level and building groups.

Local government

Department heads manage their own staff lists without waiting on central IT.

Manufacturing and retail

Site supervisors update shift and location groups as people come and go.

Nonprofits

Program leads add volunteers and contractors, then remove them when the work ends.

Screenshots

A closer look

Leashless is designed to look and feel like the rest of Windows 11, so there's nothing new to learn.

The Add people dialog for Customer Support with a pasted list of names and email addresses. Each line has been checked: four people found, one name that matches two people and needs a choice, one not found, and one person who is already a member.
Paste from ExcelEvery line is checked first. People already in the group are noted, and anything unclear is flagged for you to choose.
The Save changes dialog for Customer Support listing three changes to check before saving: add Freya Thompson, add Theo Grant and remove Charlie Campbell, with a Save 3 changes button.
Review changesEvery add and removal is listed before it's saved, and nothing changes in Active Directory until you say so.
The Recent changes panel listing three changes just saved to Customer Support and one person removed from Contractors automatically when their temporary membership ended.
Recent changesA plain record of what changed and in which group, including people removed automatically when their time was up.
Leashless in dark mode showing the Finance group, with one member marked to be removed and a bar showing one unsaved change ready to review and save.
Dark modeSwitches automatically with the Windows theme.

For IT

Loosen the leash, keep the fence

Leashless never asks for more access than Active Directory already gives. You decide who can change what, the same way you do today. Teams get freedom inside the limits you set.

Permissions you already understand

Tick "Manager can update membership list" on a group's Managed By tab, or delegate a whole OU of groups to a security group of managers. Leashless shows exactly those groups.

Deploy like any other Windows app

One MSI with silent install, in-place upgrades and Group Policy support. Preset settings for every PC from a single file.

Nothing extra to host

Leashless talks directly to your domain controllers. There's no server, database or cloud account to look after.

Code-signing ready

Sign the app and installer with your own certificate so Windows SmartScreen stays quiet.

# Silent install on every PC that needs it
msiexec /i Leashless.msi /qn

# Or assign it with Group Policy:
# Computer Configuration › Policies ›
# Software Settings › Software installation

# Let a team lead manage a group (one-time setup)
Set-ADGroup "Sales Team" `
  -ManagedBy "ALDERFINCH\spatel"

Pricing

One price for your organization, not per seat

Every license covers as many group managers and groups as you need. All plans include updates and email support.

Trial
Free for 30 days
  • Every feature, no limits
  • Try it against your real domain
  • No card required
Team Most popular
$249 per year
  • Up to 250 people in your directory
  • Unlimited group managers and groups
  • Updates and email support
Organization
$1,490 per year
  • Any size directory, every site
  • Purchase orders and invoicing
  • Priority support for IT staff

Questions

Common questions

What does Leashless need to run?

A Windows 10 or 11 PC joined to your Active Directory domain. People sign in to Windows as usual and Leashless uses that account.

Can people change groups they shouldn't?

No. Leashless can only do what Active Directory already allows that person to do. If IT hasn't given them rights to a group, it doesn't appear in the app. Leashless means no waiting on IT, not no rules.

Does it work with Microsoft Entra ID or Google Workspace?

Leashless works with on-premises Active Directory groups, including groups that sync up to Microsoft 365.

Where is our data stored?

On your own domain controllers. Leashless doesn't send names, groups or changes anywhere else.

Can we pay by purchase order?

Yes, on the Organization plan. We'll send an invoice your business office can process.