Andy Kemp Consulting

Downloads · No sign-up needed

Free tools, ready to run.

The latest builds of the free Andy Kemp Consulting apps for Microsoft admins, each with a SHA-256 so you can check what you downloaded. What each tool does, its docs and demos are on the tools site.

A SHA-256 for every file /latest/ links always give the newest version

Windows app · MSI installer

Exchange Certificate Manager

Certificates, URLs and accepted domains for Exchange Server: request, renew, deploy and health-check certificates, including Let's Encrypt with automatic renewal.

Download ExchangeCertManager.msiVersion 2.1.0 · 5 November 2026 · 72.8 MB
SHA-2569efba979225e1ffbe5d4fef42c0476f12c874ec705ec4db4f6b58fdb4cf984e0

The app on its own, without installing (the in-app updater uses this)

SHA-256ba284ac760e10c753ac5f012dd7c02a74fe02f4adf185bd0b25c15fac4ee421c
Earlier versions (21)
  • 2.0.3 4 November 2026 · 72.8 MB
  • 2.0.2 4 November 2026 · 72.8 MB
  • 2.0.1 4 November 2026 · 72.8 MB
  • 2.0.0 4 November 2026 · 72.8 MB
  • 1.8.1 4 November 2026 · 72.7 MB
  • 1.8.0 4 November 2026 · 72.7 MB
  • 1.7.1 4 November 2026 · 78.7 MB
  • 1.7.0 4 November 2026 · 78.5 MB
  • 1.6.2 4 November 2026 · 78.5 MB
  • 1.6.1 4 November 2026 · 78.5 MB
  • 1.6.0 4 November 2026 · 78.3 MB
  • 1.5.1 4 November 2026 · 78.3 MB
  • 1.5.0 4 November 2026 · 78.3 MB
  • 1.4.1 4 November 2026 · 78.3 MB
  • 1.4.0 4 November 2026 · 78.3 MB
  • 1.3.0 4 November 2026 · 78.3 MB
  • 1.2.2 4 November 2026 · 78.3 MB
  • 1.2.1 4 November 2026 · 78.3 MB
  • 1.2.0 4 November 2026 · 78.3 MB
  • 1.1.1 4 November 2026 · 78.2 MB
  • 1.1.0 4 November 2026 · 78.2 MB

Windows app · installer or portable EXE

Win11 Image Prep

Build a ready-to-deploy Windows 11 image or USB stick with drivers, updates and apps added for you.

Download Win11ImagePrep_Setup.exeVersion 5.9.14 · 4 November 2026 · 128 MB
SHA-256b1950f59cc77d8b63185a5f205aeceaf837929c62443191ae99b8e020e2e16e8

Portable: a single EXE with nothing to install. Run it from anywhere, including a USB stick

SHA-256686c87937d31416aeb73643dc22a7d14eaf778ea849f6a35b2afceef0a63afb2
Earlier versions (9)
  • 5.9.13 4 November 2026 · 128 MB
  • 5.9.12 4 November 2026 · 128 MB
  • 5.9.11 4 November 2026 · 128 MB
  • 5.9.10 4 November 2026 · 70.0 MB
  • 5.9.9 4 November 2026 · 70.0 MB
  • 5.9.8 4 November 2026 · 70.0 MB
  • 5.9.7 4 November 2026 · 70.0 MB
  • 5.9.6 4 November 2026 · 70.0 MB
  • 5.9.5 4 November 2026 · 70.0 MB

Windows app · single EXEBeta

AKC AppDeploy

Package a Windows app and publish it for Intune in one flow: build the .intunewin, test the install, fill in the detection and Company Portal details, upload and assign, then supersede it with the next version, with a least-privilege sign-in. Version 1, still in beta.

Download AKC-AppDeploy.exeVersion 1.0.0 · 5 November 2026 · 71.5 MB
SHA-256515ddd81b49899b36fc8cc0afa8cf225af21e27ef5ce2ab59d99f07ca666e1a7
Earlier versions (16)
  • 0.7.0 5 November 2026 · 71.5 MB
  • 0.6.3 5 November 2026 · 71.5 MB
  • 0.6.2 5 November 2026 · 71.5 MB
  • 0.6.1 5 November 2026 · 71.5 MB
  • 0.6.0 5 November 2026 · 71.5 MB
  • 0.5.3 5 November 2026 · 71.5 MB
  • 0.5.2 5 November 2026 · 71.5 MB
  • 0.5.1 4 November 2026 · 71.5 MB
  • 0.5.0 4 November 2026 · 71.5 MB
  • 0.4.0 4 November 2026 · 71.4 MB
  • 0.3.3 4 November 2026 · 71.4 MB
  • 0.3.2 4 November 2026 · 71.3 MB
  • 0.3.1 4 November 2026 · 71.3 MB
  • 0.3.0 4 November 2026 · 71.3 MB
  • 0.2.0 4 November 2026 · 69.7 MB
  • 0.1.0 4 November 2026 · 69.7 MB

Ubuntu Server 24.04 · zip with installer

HAPMan (Happy Manager)

Run several servers behind one public IP: a small web admin for HAProxy that routes by hostname (HTTPS pass-through by SNI, HTTP by Host, plain TCP ports), with health checks, staged changes with rollback, and Entra ID sign-in.

Download hapman.zipVersion 1.2.0 · 5 November 2026 · 2.5 MB
SHA-256c3eec9471253feb077720e29be8c5d2e34b2b9b64bda57c61e417ecc63e64d57

The Entra app script on its own, to run on your Windows or Mac machine

SHA-2562f448f8a140128baedc9ca3e707614ff48d45f3b2599248cb56052a14f32be0e

Windows app · single EXE · licence neededBeta

AKC MigPrep

Prepare a merger or acquisition migration and make the cutover safe: users, sync anchors, attributes, addresses, permissions and coexistence, alongside the data mover you choose. The Setup console checks your connections and installs MigPrep Server on your own server. Needs a licence key from your area on migprep.andykemp.com.

Download AKC-MigPrep-Setup.exeVersion 0.1.0 · 6 November 2026 · 72.4 MB
SHA-2562ef4c550a2f8ba187c5b6d3a2ed0684a75c901ef46293f6d627d0f77144860be

Check what you downloaded

Trust, then verify.

Run Get-FileHash on the file and compare the result with the SHA-256 on its card. Earlier versions stay available.

PowerShell
Get-FileHash .\ExchangeCertManager.msi -Algorithm SHA256