Features
The whole product, grouped the way the console is.
Directory
Users — one account per person, one password everywhere. Disable instantly when somebody leaves; their local accounts on every PC go with it.
Groups — static, or dynamic from a saved query so joiners land in the right ones without anybody remembering.
Org units — the tree policy and delegation hang on, with inheritance.
Delegation — grant a role scoped to one branch: a full administrator of Sales and nothing else. Helpdesk, Device Enrollers and Audit Readers come built in.
Devices and RMM
Enrolment by one-time PIN. The PC generates its own key and proves itself with that from then on — no shared secret to leak.
Remote control, terminal, live registry, file browser and services & processes — all over the agent's outbound tunnel, all audited, all working wherever the machine is.
Software deployment with hash verification, and scripts on demand or on a timer.
Disable a machine reversibly, or revoke it for good.
Policy
Import Microsoft's Administrative Templates (ADMX) as a zip, plus TWAD's own settings for what ADMX cannot describe: local groups and users, scripts, scheduled tasks, certificates, wireless profiles, user rights, audit policy, security options, drive maps, shortcuts, file permissions, service state, registry values, and directory sign-in over RDP.
Compliance checks let one policy set something and verify it.
Effective policy shows exactly what applies to a machine and why.
Access
OIDC for web applications, with per-application control over who may use them. Read-only LDAP for appliances that speak nothing else. MFA with passkeys or TOTP, required by group or for everybody.
System
Clustering with replication, graceful role handover and fenced failover. Sites so a branch's machines check in through the branch's own appliance. Backups, a full audit log of reads as well as writes, and rolling upgrades that tell you which node is safe to take down next.