Self-service Active Directory groups

Take group changes off IT's leash.

Leashless lets managers, office staff and team leads add and remove people from the groups they look after. It signs in with their Windows account, shows only the groups they're allowed to change, and asks them to review every change before it's saved. IT sets the boundaries once, and nobody waits on a help desk ticket again.

See pricing Look around the app

Windows 10 and 11 · Installs with one MSI · No server to set up

No password promptUses the Windows sign-in people already have
Free, within limitsNobody sees groups they can't change
Groups of any sizeFrom a team of 6 to all 5,000 employees
Light and darkFollows the Windows 11 theme setting

Features

Built for the person who gets the new-hire email

Someone starts Monday. Someone moves from Sales to Marketing. A contractor needs the project mailing list for three months. Leashless turns each of these into a two-minute job for the people closest to the team, instead of a ticket in IT's queue.

Signs in automatically

Leashless uses the account people already signed in to Windows with. No separate password to remember, reset or share.

Every group they manage, in one list

Groups appear when IT names the person as the group's manager, or gives them rights to a folder of groups. Nothing else shows up.

Find people the way you know them

Type a name, an email address or a username. Leashless finds the right person even when two people share a last name.

okafor · d.okafor@alderfinch.example · dokafor

Paste a whole list from Excel

Copy a column of names or emails from a spreadsheet and paste it in. Leashless matches each line and flags anything it can't find before you add it.

Review before anything is saved

Adds and removals wait in a list of unsaved changes. Check them, undo the ones you didn't mean, then save them all at once.

History and CSV export

See who was added or removed and when. Export any group's members to CSV for a directory, an access review or an audit.

Who it's for

Any team that lives in Active Directory

If your groups control mailing lists, shared folders, Teams channels or app access, the people who know who belongs in them can keep them current.

Offices and firms

Office managers add new hires to department lists and shared drives on day one.

Healthcare

Charge nurses keep on-call and shift groups accurate as rotations change.

Schools and districts

Front office staff move teachers between grade-level and building groups.

Local government

Department heads manage their own staff lists without waiting on central IT.

Manufacturing and retail

Site supervisors update shift and location groups as people come and go.

Nonprofits

Program leads add volunteers and contractors, then remove them when the work ends.

Screenshots

A closer look

Leashless is designed to look and feel like the rest of Windows 11, so there's nothing new to learn.

Paste from ExcelEvery line is checked first. Duplicates are skipped and anything unclear is flagged.
Review changesChanges to several groups are saved together, so nothing is left half-done.
Change historyA plain record of what changed, when, and in which group.
Dark modeSwitches automatically with the Windows theme.

For IT

Loosen the leash, keep the fence

Leashless never asks for more access than Active Directory already gives. You decide who can change what, the same way you do today. Teams get freedom inside the limits you set.

Permissions you already understand

Tick "Manager can update membership list" on a group's Managed By tab, or delegate a whole OU of groups to a security group of managers. Leashless shows exactly those groups.

Deploy like any other Windows app

One MSI with silent install, in-place upgrades and Group Policy support. Preset settings for every PC from a single file.

Nothing extra to host

Leashless talks directly to your domain controllers. There's no server, database or cloud account to look after.

Code-signing ready

Sign the app and installer with your own certificate so Windows SmartScreen stays quiet.

# Silent install on every PC that needs it
msiexec /i Leashless.msi /qn

# Or assign it with Group Policy:
# Computer Configuration › Policies ›
# Software Settings › Software installation

# Let a team lead manage a group (one-time setup)
Set-ADGroup "Sales Team" `
  -ManagedBy "ALDERFINCH\dokafor"

Pricing

One price for your organization, not per seat

Every license covers as many group managers and groups as you need. All plans include updates and email support.

Trial
Free for 30 days
  • Every feature, no limits
  • Try it against your real domain
  • No card required
Team Most popular
$249 per year
  • Up to 250 people in your directory
  • Unlimited group managers and groups
  • Updates and email support
Organization
$1,490 per year
  • Any size directory, every site
  • Purchase orders and invoicing
  • Priority support for IT staff

Questions

Common questions

What does Leashless need to run?

A Windows 10 or 11 PC joined to your Active Directory domain. People sign in to Windows as usual and Leashless uses that account.

Can people change groups they shouldn't?

No. Leashless can only do what Active Directory already allows that person to do. If IT hasn't given them rights to a group, it doesn't appear in the app. Leashless means no waiting on IT, not no rules.

Does it work with Microsoft Entra ID or Google Workspace?

Leashless works with on-premises Active Directory groups, including groups that sync up to Microsoft 365.

Where is our data stored?

On your own domain controllers. Leashless doesn't send names, groups or changes anywhere else.

Can we pay by purchase order?

Yes, on the Organization plan. We'll send an invoice your business office can process.