tontontools.

Release Notes

Get Primary User And Email From Device — Changelog

Version history for Get Primary User And Email From Device. Entries follow the Keep a Changelog convention with four groups: Added, Changed, Fixed, Security.

v1.2.0

Released June 2026released

Column governance update. Technicians can show or hide the optional AD columns, and administrators can centrally restrict which columns are available through a read-only registry policy. Disabled columns are never queried from Active Directory. Backward-compatible: with no policy in place, all columns remain available exactly as in v1.1.0.

Added

  • Columns ▾ menu on every result grid (Import from File, Paste Device List, From SCCM Collection) to show or hide the optional AD columns. The choice is saved per Windows user (HKCU) and kept across sessions.
  • Administrator column policy: an allow-list read at startup from HKLM (SOFTWARE\TontonPro\GPUED\Policy, 64-bit view, read-only). Default is fully open; setting a Show<Column> value to 0 disables that column for every technician on the machine, with no way to re-enable it from the menu.
  • Deployable via GPO, Intune or SCCM (a .reg file or a reg.exe script). A column disabled by policy is not requested from AD, not displayed, not exported, and not listed in the Columns menu — data minimisation at source.
  • Dynamic CSV/TXT export: the export now writes only the columns that are both policy-allowed and currently visible.

Changed

  • AD enrichment now requests only the LDAP attributes whose column is policy-allowed, instead of always requesting the full set. The manager lookup runs only when the Manager column is allowed.

Security

  • Data minimisation and least privilege: administrators can restrict which directory attributes GPUED reads and exposes. A disabled attribute is never queried from Active Directory, never displayed, and never written to the CSV/TXT export.

v1.1.0

Released June 2026released

Active Directory enrichment update. Each resolved primary user now comes with a full AD profile — nine new attribute columns on all three result grids — and the AD lookup is faster thanks to a single batched query per user. Fully backward-compatible: same input methods, same credentials, same licensing.

Added

  • Nine new Active Directory attribute columns on every result grid (Import from File, Paste Device List, From SCCM Collection): Department, Title, Manager, Office, Company, UPN, Mobile, City, and Account (account status, Enabled or Disabled).
  • The Manager column is resolved to the manager's readable display name rather than the raw distinguished name.
  • Result grids now scroll horizontally to absorb the increased width while keeping every column accessible.
  • CSV/TXT export now includes all 16 columns (device name, primary user, email, display name, the nine AD attributes, source and status).
  • Reinforced use cases: pre-deployment targeting and email-campaign segmentation by department, title, office, company or city; exclusion of disabled accounts via the Account column; hierarchical context via Manager.

Changed

  • AD enrichment is now performed with a single batched Get-ADUser query per user (returning all attributes at once) instead of one query per attribute — noticeably faster on large device lists. The manager DN triggers one additional lookup to resolve a readable name.

v1.0.0

Released January 2026released

Initial public release of Get Primary User And Email From Device. The product is sold in the Pro tier of the TontonTools suite. A 14-day free trial is available without a credit card.

Added

  • Bulk SCCM + Active Directory lookup: for a list of device names, find the primary users recorded in SCCM (via SMS_UserMachineRelationship) and their email addresses from Active Directory (via Get-ADUser). Symmetric counterpart of Get Primary Device And Email From User.
  • Three input methods, switchable via tabs: file import (CSV/TXT, one device name per line), paste list (multi-line text area — accepts rows pasted straight from the SCCM console Devices node, with the device name extracted automatically from each line), and SCCM device collection picker (filterable dialog listing all CollectionType = 2 collections).
  • Pivot lookup logic: for each device, SCCM is queried for the primary user(s) by ResourceName via SMS_UserMachineRelationship, then each resolved user is enriched with mail and displayName from Active Directory.
  • Bulk email copy: a dedicated Copy Emails button copies all resolved email addresses to the clipboard as a comma-separated list, ready to paste into an Outlook recipient field.
  • CSV export of the full result grid with all columns: device name, primary user(s), resolved sAMAccountName, email address, AD display name, AD manager, status (resolved / not found / multiple matches).
  • Dual-tab interface: one tab per input method, plus a Results tab that consolidates all queries from any input source into a single grid.
  • PowerShell ActiveDirectory module integration via System.Management.Automation: Get-ADUser is invoked in-process to read mail and displayName. RSAT must be installed on the workstation.
  • SCCM connection via the standard WMI namespace root\sms\site_<X> with the in-dialog Auto-detect cascade.
  • CMTrace-compatible activity log written to C:\TEMP\GetPrimaryUserAndEmailFromDevice.log.
  • DPAPI-encrypted credential storage shared across the suite at %AppData%\TontonTools\credentials.dat.
  • Read-only fallback mode in license grace period.

Security

  • No agent installed on managed endpoints — the product only communicates with the SCCM site server (RPC), a writable domain controller (LDAP via Get-ADUser), and the TontonTools license endpoint.
  • No telemetry, no cloud backend, no third-party analytics.
  • Kerberos authentication under the signed-in Windows user — no service account required.
  • TLS 1.2 enforced on the license validation request.
  • No Graph permissions required — this tool is on-premises-only.

Related documentation