Starters, leavers, BitLocker keys, locked-out accounts and licences from one calm Windows app. The jobs that take ten minutes across four admin centres take a click or two.
Choose a result to see how EntraPlus does it.
Three things school IT teams do every week. Drag the divider to compare the PowerShell route with EntraPlus.
Before: PowerShell
After: EntraPlus
The jobs that come round every week in a school IT office, done in a click or two instead of a tour of admin centres.
BeforeFour admin centres and a checklist. About 25 minutes, and it's easy to miss a step.
With EntraPlusOne window. Under a minute.
Sign-in blocked, signed out everywhere, licences and groups removed, mailbox shared, every step confirmed.
BeforeRemote into a server, open AD Users and Computers, find them. About 4 minutes.
With EntraPlusSeen on your dashboard. Unlocked in 10 seconds.
Locked-out accounts appear before the phone rings, and a quick job unlocks them.
BeforeIntune, then the device, then recovery keys, then match the ID. About 5 minutes.
With EntraPlusType the name, read out the key. 10 seconds.
Works for keys saved in Entra or Active Directory, and LAPS passwords too.
BeforeAccount, licence, groups, mailbox, password. About 12 minutes, and a typo means starting again.
With EntraPlusOne form. Two minutes.
The sign-in name builds itself, the licence shows how many are left, and the password is ready to copy.
BeforeFind each computer, open it, move it, repeat. About 15 minutes for a classroom.
With EntraPlusSelect them all, drag onto the OU. 20 seconds.
Filters find them first: not seen for 90 days, Windows 10, no description, or your own.
BeforeYou find out when a new starter can't get Office.
With EntraPlusAmber on your dashboard while there's still time to order.
Only the licences you pay for, with how many are left, staff A1, A3 and A5 first.
146 hours back a year
That's about 19 working days, worth £3,212 of your team's time.
EntraPlus Pro for 3 technicians: £720 a year.
Pays for itself in 41 days
Estimates from the steps each job takes by hand. Move the sliders to match your school.
Power tools in the hands of a busy technician need guard rails. These are on by default and can't be switched off.
Deleting a user or group, retiring or wiping a device: you type its name first.
Disabling someone re-checks whether they're enabled right now, so you can't flip the wrong way.
Conditional Access templates are created in report-only mode with your own account excluded.
Every change is logged with who made it. Passwords, BitLocker keys and LAPS passwords never are.
The app talks straight to Microsoft and your own domain controllers. We see none of it.
You sign in as yourself. EntraPlus can never do more than your Entra admin role allows.
EntraPlus is growing from a management app into a full engineering toolkit. Pro subscribers get each of these as it lands.
Stale computers, locked-out staff or licences running low, emailed to you every Monday morning.
Save a role once, such as Teacher or Sixth Form, with its groups, licence and OU, then apply it in one click.
See who holds which admin roles, and where someone has more access than their job needs.
Before you save, see which groups, licences, policies and devices the change will touch.
Spot accounts that differ between AD and Entra, sync errors and orphaned objects.
Ready-made reports for leavers still active, stale devices and accounts without MFA.
Design least-privilege roles for your team and check them before you assign them.
Describe bulk changes as a file, preview them, and keep them in version control.
Something you'd use every week that isn't here? Tell us what to build next.
One price per technician. No setup fees and no per-user charges, however big your school. Every new organisation gets a free 30-day Pro trial for up to 5 technicians, with no card needed.
£0
Read-only, for as long as you like.
£240 per technician a year, or 5 technicians for £1,000 (then £240 each)
Everything in Free, plus:
30 days of Pro for up to 5 technicians. No card needed.
Install for everyone on the PC, or just for you with no admin rights needed.
Microsoft's own sign-in page opens in your browser. The first time, a Global Administrator approves EntraPlus once for your organisation.
Everything you can change is right there, with where it's saved and what it will do.
Windows 10 or 11, 64-bit. Nothing else to install.
Push it silently from Intune or your RMM tool:
.\EntraPlus-Setup.exe /VERYSILENT /ALLUSERS.\EntraPlus-Setup.exe /VERYSILENT /CURRENTUSERAnything else? hello@entraplus.co.uk
Yes, to look things up. The Free plan is read-only with no time limit: look up users, groups, devices and licences, and export lists to CSV. Making changes needs Pro, at £20 a month or £240 a year per technician, or 5 technicians for £1,000 a year. Every new organisation gets a free 30-day Pro trial for up to 5 technicians, with no card needed.
The first person from your school to sign in sets up your organisation and becomes its manager. Your organisation then gets 30 days of Pro for up to 5 technicians, with no card needed. The manager hands out the seats. Each organisation gets one trial. When it ends, the app carries on as the read-only Free plan until you choose a plan.
No. The app runs on your PC and talks directly to Microsoft and your own domain controllers. Nothing about your users, devices or policies is sent to us. Your EntraPlus account only holds your name, email and subscription.
You sign in with your own admin account, and EntraPlus can never do more than your Entra role allows. User Administrator covers users and groups, Intune Administrator covers devices. A Global Administrator approves the app's permissions once for the organisation. Extra permissions for Pro device and policy features are only requested the first time you use them.
Yes, with Pro, including from cloud-only laptops that aren't joined to the domain. EntraPlus connects to your domain controller over the network or VPN, detects accounts that sync from AD and saves their changes there.
Not for users, groups, devices or policies. Those talk to Microsoft Graph directly. Exchange and Active Directory features need a module each, and EntraPlus installs them for you with one click.
Any time from your account page. Pro keeps working until the end of the period you've paid for, then the app carries on as the read-only Free plan.
It was built in a school, so the language and defaults suit schools and trusts: academic-year expiry dates, education licences, staff and student groups. It works the same for any organisation on Microsoft 365.
No. EntraPlus is an independent product and isn't affiliated with or endorsed by Microsoft.