Create starters, run leavers, find BitLocker keys and tidy Conditional Access from one Windows app, and see the exact Graph call behind every button.
Choose a result to see its safety checks and the exact API call.
Three things school IT teams do every week. Drag the divider to compare the PowerShell route with EntraPlus.
Before: PowerShell
After: EntraPlus
Nothing hidden. Each action lists the Microsoft Graph or PowerShell call behind it, how risky it is, and the safety check EntraPlus adds. Open a row to copy the command.
| Where | Call |
|---|
No actions match those filters.
Power tools in the hands of a busy technician need guard rails. These are on by default and can't be switched off.
Deleting a user or group, retiring or wiping a device: you type its name first.
Disabling someone re-checks whether they're enabled right now, so you can't flip the wrong way.
Conditional Access templates are created in report-only mode with your own account excluded.
Every change is logged with who made it. Passwords, BitLocker keys and LAPS passwords never are.
The app talks straight to Microsoft and your own domain controllers. We see none of it.
You sign in as yourself. EntraPlus can never do more than your Entra admin role allows.
Light or dark, following your Windows setting.
EntraPlus is growing from a management app into a full engineering toolkit. Pro subscribers get each of these as it lands.
Turn any action into a PowerShell or Graph script you can review, save and run yourself.
Save a role once, such as Teacher or Sixth Form, with its groups, licence and OU, then apply it in one click.
See who holds which admin roles, and where someone has more access than their job needs.
Before you save, see which groups, licences, policies and devices the change will touch.
Spot accounts that differ between AD and Entra, sync errors and orphaned objects.
Ready-made reports for leavers still active, stale devices and accounts without MFA.
Design least-privilege roles for your team and check them before you assign them.
Describe bulk changes as a file, preview them, and keep them in version control.
Something you'd use every week that isn't here? Tell us what to build next.
One price per technician. No setup fees and no per-user charges, however big your school.
£0
For as long as you like.
£120 per year, about £10 a month
Everything in Free, plus:
Install for everyone on the PC, or just for you with no admin rights needed.
Microsoft's own sign-in page opens in your browser. The first time, a Global Administrator approves EntraPlus once for your organisation.
Everything you can change is right there, with where it's saved and what it will do.
Windows 10 or 11, 64-bit. Nothing else to install.
Push it silently from Intune or your RMM tool:
.\EntraPlus-Setup.exe /VERYSILENT /ALLUSERS.\EntraPlus-Setup.exe /VERYSILENT /CURRENTUSERAnything else? hello@entraplus.co.uk
Yes. The free version covers everyday user, group and device work for cloud accounts, with no time limit. Pro adds hybrid Active Directory, Exchange, licences, leavers, bulk starters, device actions, BitLocker and LAPS, Conditional Access templates and CSV export.
No. The app runs on your PC and talks directly to Microsoft and your own domain controllers. Nothing about your users, devices or policies is sent to us. Your EntraPlus account only holds your name, email and subscription.
You sign in with your own admin account, and EntraPlus can never do more than your Entra role allows. User Administrator covers users and groups, Intune Administrator covers devices. A Global Administrator approves the app's permissions once for the organisation. Extra permissions for Pro device and policy features are only requested the first time you use them.
Yes, with Pro, including from cloud-only laptops that aren't joined to the domain. EntraPlus connects to your domain controller over the network or VPN, detects accounts that sync from AD and saves their changes there.
Not for users, groups, devices or policies. Those talk to Microsoft Graph directly. Exchange and Active Directory features need a module each, and EntraPlus installs them for you with one click.
Any time from your account page. Pro keeps working until the end of the period you've paid for, then the app carries on as Free.
It was built in a school, so the language and defaults suit schools and trusts: academic-year expiry dates, education licences, staff and student groups. It works the same for any organisation on Microsoft 365.
No. EntraPlus is an independent product and isn't affiliated with or endorsed by Microsoft.