Premium Windows tools that fix what Microsoft consoles can't.
Add, remove, audit and migrate devices across Active Directory, SCCM, Intune and Entra ID. From your workstation. Without a server. Without a console. Without an enterprise quote.
14-day trial · No credit card · Instant license
30-second daily tasks, not 30-minute ones
What used to be a SQL query, a PowerShell script or three console tabs is now a single button click. Your L1 team handles 5x more tickets in the same shift.
No server. No agent. No firewall holes.
Every TontonTools app runs from your technician’s workstation. Read/write directly against your existing AD, SCCM, Intune and Entra. Nothing to deploy. Nothing to maintain.
CMTrace logs from day one
Every operation timestamped, attributed, and stored in C:\TEMP. Pass any compliance audit without changing a single line of code. Destructive operations include rollback snapshots.
Built for IT teams managing Microsoft endpoints in financial services, healthcare and hospitality.
- Financial services
- Healthcare
- Hospitality
- Public sector
- Manufacturing
- Education
Every tool. One suite. Zero servers.
Each app is a single MSI that runs on your technician's workstation. Pick the tier that fits your team — every tool ships with a 14-day trial.
- Essentials
Add User to Collection
Bulk-add Active Directory users to SCCM collections — CSV, paste or query.
Learn more - Essentials
Add Device to Collection
Bulk-add devices to SCCM collections — bypass the console entirely.
Learn more - Essentials
Create Device in SCCM
Pre-stage rebuild devices in SCCM and add them to the All Systems collection.
Learn more - Pro
Get Primary Device And Email From User
Find any user's primary workstation and email address in 2 seconds — SCCM and Active Directory.
Learn more - Pro
Get Primary User And Email From Device
Reverse lookup: find who's currently assigned to a workstation, with their email address.
Learn more - Pro
Duplicate Device Management
Detect and clean SCCM / Intune / Entra duplicates — the #1 cause of failed deployments.
Learn more - Pro
Orphan Device Cleaner
Find devices owned by disabled, deleted or non-existent users. Recover M365 licenses.
Learn more - Enterprise
Delete Device Everywhere
Atomic 4-system delete with Rollback Snapshot Engine. AD + SCCM + Intune + Entra.
Learn more - Enterprise
Obsolete Device Management
Identify and decommission devices that haven't checked in for X days.
Learn more - Standalone
SCCM to Intune App Migrator
Automate 80% of your SCCM-to-Intune app migration. Save 200-500 hours.
Learn more
From download to result in five minutes.
Three steps. No deployment project. No infrastructure ticket.
- Step 1
Install
Download a single MSI per technician workstation. No server. No agent. No firewall rules. Install time: under 30 seconds.
- Step 2
Connect
On first launch, paste your Microsoft Graph App Registration credentials (Client ID, Secret or Certificate). SCCM auto-detection runs in the background. Configuration time: 2 minutes.
- Step 3
Use
Open any tool, hit the action, get the result. No queries to write. No collections to remember. No Entra blade hunting.
How we compare.
How we differ from traditional endpoint management tooling.
Traditional enterprise tooling
What you're stuck with today
- Deployment model — Central server + agents
- Pricing model — Enterprise sales + annual commitment
- Modern Workplace cover — Console-by-console
- Audit trail — Available as add-on
- Trial — Sales-gated
TontonTools
What we replace it with
- Deployment model — Standalone Windows app, no central server
- Pricing model — Self-service subscription or one-time payment
- Modern Workplace cover — Native Intune + Entra ID via Microsoft Graph
- Audit trail — CMTrace logs + JSON rollback snapshots
- Trial — 14-day free trial, no card
What you get the day you click “Buy”.
Four guarantees we make to every customer — written into the terms, not the marketing copy.
30-day money-back guarantee
On every subscription. Cancel and refund directly from your customer portal — no email tickets, no negotiation.
Built on official Microsoft Graph
Every read and write goes through documented endpoints. No undocumented APIs. No screen scraping.
Credentials never leave the workstation
Tenant secrets are DPAPI-encrypted on disk and never transmitted to TontonTools servers. We have no copy of your data.
TontonPro SASU
SIREN 994 272 045. TontonPro SASU is the publisher. Lemon Squeezy handles VAT and invoicing as Merchant of Record worldwide.
Stop fighting your tools. Start fixing your estate.
14-day trial. No credit card. Instant license. Click and start using the tools right now.