tontontools.
Essentials

Bulk-add Active Directory users to SCCM collections.

Three input modes — CSV file, pasted list, or SCCM query. No console. No SQL. No PowerShell. Adds 500 users in under 30 seconds.

Start free trialSee pricing

Included in the Essentials tier · 14-day trial, no card

Add User to Collection

The problem

Adding users to a User Collection in the SCCM console is the single most tedious task an L1 technician performs. Each user requires opening the collection, switching to Direct Membership Rules, browsing the AD picker, finding the user, applying changes, and waiting for the collection to update.

  • For 500 users — that's an afternoon lost in console clicks.
  • Typos slip through — because the AD picker never tells you a user is disabled until policy fails to apply.
  • No audit trail — Service Desk teams have no defensible record of who added what user when.

The native SCCM console workflow assumes you have time. Real Service Desk teams don't.

The TontonTools way

Add User to Collection replaces the click-through workflow with three deterministic input modes.

  • CSV file — drag-and-drop a list of usernames, preview the resolved rows, click Apply.
  • Pasted list — paste from a spreadsheet, ticket or email body — resolution happens live.
  • SCCM query — pull users from an existing User Collection straight into a new target collection.
  • Audit by default — every addition logged to a CMTrace-compatible file with timestamp, AD lookup result and SCCM API response.

Key features

Built for high-stakes operations where forgetting a system is not an option.

  • Three input modes

    CSV file, pasted text, or query against another SCCM user collection. Same UX for all three — pick the one that fits the ticket.

  • AD lookup before commit

    Every username is resolved against Active Directory to confirm the user exists and is enabled. Typos and disabled accounts are caught before they pollute the collection.

  • Up to 10,000 users per run

    Bulk mode handles entire patch ring populations in one operation. Live preview grid before commit.

  • Smart filters

    Skip disabled users, skip users not in a specific OU, skip users with empty mail attribute. Configurable per run.

  • CMTrace audit log

    Every addition timestamped and attributed in C:\TEMP\AddUserToCollection.log. Open directly in CMTrace.exe for compliance review.

  • CSV export of results

    Attach the per-user outcome report to your ticket or change request — every row marked succeeded, skipped or failed with the exact reason.

See it in action

Real screens. No marketing renders.

  • CSV mode: import a file of usernames — each one resolved against AD and logged as it is added.
  • Paste mode: paste from any spreadsheet, ticket or email body. Live AD resolution.
  • Include Collections: roll the members of other user collections into the target as include rules.
  • Exclude Collections: carve members out — include a whole site, exclude contractors, rules coexist.

Technical details

What runs where. What it writes to disk. What permissions it needs.

Authentication

Active Directory — current user credentials (Kerberos)

Systems

Active Directory (on-prem)

Microsoft Configuration Manager (SCCM / MECM)

Audit log

CMTrace-compatible — C:\TEMP\AddUserToCollection.log

Bulk limit

10,000 users per operation

Min permissions

SCCM permissions reference

Who it's for

L1 Service Desk technicians who add users to collections daily for software deployment, group policy targeting, or compliance enforcement. Teams managing 200+ users per week benefit immediately.

Related products

Other tools in the suite that pair well with this one.

Stop adding users one by one.

Try Add User to Collection — included in Essentials, Pro and Enterprise tiers.

Start free trialSee pricing