tontontools.
Pro

Find any user's primary workstation and email in 2 seconds.

Bulk lookup primary devices and email addresses for one user or 1,000 users at once. Returns device name, owner email from Active Directory, OS, last seen, SCCM + AD. The single most-used L2 lookup, productized.

Start free trialSee pricing

Included in the Pro tier · 14-day trial, no card

Get Primary Device And Email From User

The problem

Every Service Desk ticket starts with the same question: "which workstation does this user have?". The answer lives in three different systems.

  • SCCM — query SMS_UserMachineRelationship — assuming you remember the WMI namespace and the WQL syntax.
  • Entra ID — correlate registered devices to userPrincipalName via Microsoft Graph.
  • Active Directory — check the managedBy attribute and reconcile by hand.

Three queries, three syntaxes, three results to merge. Or you spend 2 seconds in this tool.

The TontonTools way

Get Primary Device And Email From User cross-correlates SCCM and Active Directory and returns one canonical answer per user.

  • Single-user mode — type one UPN, see the device + mail + OS + compliance status in 2 seconds.
  • Bulk lookup — paste 1,000 users, get 1,000 devices and their owner mails in one grid.
  • SCCM + Entra correlation — SMS_UserMachineRelationship and Graph registeredDevices merged with the SCCM primary flag highlighted.
  • Owner mail in the grid — directly copyable for ticket comms — no separate AD lookup required.

Key features

Built for high-stakes operations where forgetting a system is not an option.

  • Single-user mode

    Type a UPN, get device + mail + OS + last seen in one grid. The 2-second answer to the most common L2 ticket.

  • Bulk lookup

    CSV, paste or pull from an SCCM user collection. Up to 10,000 users per operation.

  • Cross-system correlation

    SCCM primary device flag + Entra registeredDevices, merged. Multiple primaries surfaced with the most recent highlighted.

  • Owner mail in every row

    mail attribute resolved from AD per user — directly copyable for ticket comms or bulk notifications.

  • Live filters

    Filter by OS, by "last seen older than 30 days", by SCCM collection membership. Refine the result set in real time.

  • CSV export

    Pipe the result straight into your patch management, deployment or audit workflow. No reformatting required.

See it in action

Real screens. No marketing renders.

  • Import a file of usernames or emails — get the primary device, AD email and display name for every user.
  • Paste usernames or emails (you can mix them); get the instant single-user answer, including no-affinity cases.
  • Or pull straight from any SCCM user collection — search, pick, and enumerate every member in one click.
  • A timestamped log traces every WMI lookup — devices found per user, email resolved or flagged not found.

Technical details

What runs where. What it writes to disk. What permissions it needs.

Authentication

SCCM — current user credentials (Kerberos)

Microsoft Graph — Client Secret or Certificate (JWT Client Assertion)

Systems

Microsoft Configuration Manager (SCCM / MECM)

Active Directory (on-prem)

Microsoft Entra ID

Bulk limit

10,000 users per operation

Min permissions

SCCM permissions reference

Active Directory permissions reference

Who it's for

L2 Service Desk engineers handling daily support tickets. Modern Workplace teams investigating compliance issues. Anyone who currently writes SCCM WQL queries copy-pasted from a wiki to answer "where is this user's machine?".

Related products

Other tools in the suite that pair well with this one.

Cut your first response time by 95%.

Try Get Primary Device And Email From User — included in Pro and Enterprise tiers.

Start free trialSee pricing