Z-Hire and Z-Term Alternatives for AD Onboarding and Offboarding

Z-Hire creates a new employee's accounts in Active Directory, Exchange, Office 365, Google Workspace and Lync from one template, and Z-Term disables them and archives the mailbox when the person leaves. Both are still sold by Zohno Tools, now under MTX Trading LLC, as a single desktop app whose current release is version 7.0. They used to be free: Microsoft's archived TechNet blog described Z-Hire as freeware from developer Zeya Oo. Today the Zohno site offers a 30-day trial, takes payment by PayPal and publishes no prices.

So the question for most admins is if Zohno is still worth paying for, or if another tool fits better. The seven options below cover web-based AD provisioning tools, a free scripted route, Microsoft's own lifecycle workflows, and HR or identity platforms that start onboarding from the hire record.

Prices below are as of November 8, 2026. Our method is on How we review tools.

Quick comparison

ManageEngine ADManager Plus

ADManager Plus does the Z-Hire job from a browser instead of a desktop app. Admins create users one by one from templates or in bulk from a CSV file, with Exchange mailboxes and Microsoft 365 licences set in the same step, and offboarding is a matching bulk disable or delete. Help desk staff get delegated rights to run those tasks without domain admin rights.

The ADManager Plus price list is public and yearly in US dollars. Standard starts at $595 for one domain and two technicians. Professional with two technicians, from $1,795, adds workflows, automation and HCM integration, which is the edition that lets HR data trigger accounts the way Z-Hire's HRIS connectors do.

Best for: Small IT teams that want Z-Hire style templates with a free tier and a visible price.

Pricing:

• Free edition: 100 domain objects, default domain
• Standard: $595 per year (1 domain, 2 technicians) to $4,395 (20 technicians)
• Professional: $1,795 per year (1 domain, 2 technicians) to $10,595 (20 technicians)

Watch out for:

• Scheduled automation and HR-triggered onboarding need Professional, roughly three times the Standard price.
• It runs as a server application you install and patch. Build 8042 in April 2026 fixed three reported vulnerabilities, so stay on current builds.

Official site: ManageEngine ADManager Plus.

Adaxes

Adaxes goes further than Z-Hire's one-shot templates. A new account can fire a workflow that adds groups, moves the user to the right OU, creates the mailbox and home folder, assigns a Microsoft 365 licence, sends a welcome email and runs a script, and offboarding runs the reverse. Any step can require a manager's approval, as the Adaxes home page describes.

Softerra licenses it perpetually by enabled user accounts: $1,600 for up to 100, $5,957.89 for up to 1,000, with maintenance at 30% a year. Our Adaxes alternatives guide compares it with other AD automation tools.

Best for: Teams that want HR or managers to start onboarding in a web form, with approvals before the account goes live.

Pricing:

• Perpetual: $1,600 (100 user accounts), $3,052.63 (400), $5,957.89 (1,000), $10,800 (2,000)
• Maintenance: 30% of licence per year, $480 at 100 accounts
• 30-day free trial

Watch out for:

• Google Workspace is not among its managed systems, while Z-Hire creates Google accounts too.
• The upfront licence costs more in year one than ADManager Plus Standard, but less than per-user subscriptions such as Okta or Entra at 100 users.

Official site: Adaxes.

PowerShell ActiveDirectory module

If Z-Hire appealed because it was free, a script is the free replacement. New-ADUser with a template account's attributes, Add-ADGroupMember for groups and Disable-ADAccount plus Move-ADObject for leavers cover the core of both Z-Hire and Z-Term. The module comes with RSAT, per Microsoft's ActiveDirectory module reference.

Exchange Online and Microsoft Graph modules handle the mailbox and licence steps. The scripts run in Windows PowerShell 5.1 or PowerShell 7, whose 7.6 long-term support release is supported until November 14, 2028.

Best for: Admins who already script and want onboarding they fully control.

Pricing:

• Free with RSAT; PowerShell 7 is open source under the MIT licence

Watch out for:

• There is no form for HR or the help desk, so whoever runs the script needs AD rights.
• Someone has to maintain the script as groups, licences and OUs change.

Official site: PowerShell ActiveDirectory module.

Microsoft Entra lifecycle workflows

Microsoft now ships the Z-Hire and Z-Term idea inside Entra ID. A joiner workflow can email the manager seven days before employeeHireDate, generate a temporary password and add groups; a leaver workflow disables and deletes the account and removes access packages. Mover workflows handle department changes.

Workflows run on a schedule or on demand, with up to 100 per tenant and custom task extensions through Azure Logic Apps, per the lifecycle workflows docs. They need Entra ID Governance, an add-on for P1 or P2 customers.

Best for: Microsoft 365 shops whose accounts are synced to or born in Entra ID.

Pricing:

• Entra ID Governance: $7 per user per month, annual commitment, on top of P1 ($7) or P2 ($10)
• Also included in Microsoft Entra Suite

Watch out for:

• Workflows act on Entra users. Accounts that exist only in on-premises AD stay outside them.
• Per-user pricing adds up quickly for a small company that only needs AD onboarding.

Official site: Microsoft Entra lifecycle workflows.

Rippling

Rippling moves onboarding to where the hire is first entered: HR. Its Microsoft AD integration creates an on-premises AD account for new hires who match a policy, updates name, title and manager when HR changes them, and disables the account when the person is offboarded, as the Rippling AD integration post from December 3, 2024 explains.

It works through Microsoft's Entra Connect provisioning agent, so it suits hybrid setups that already sync AD to Entra ID. Rippling also sells payroll, devices and app access, so one record can drive the laptop, the AD account and the SaaS apps.

Best for: Growing companies that want HR, payroll and IT onboarding in one system.

Pricing:

• Plans from $8 per employee per month plus a monthly base fee
• Final price by custom quote, depending on products chosen

Watch out for:

• It is a platform purchase. Buying Rippling only to replace a provisioning utility is expensive.
• On-premises AD provisioning needs a hybrid setup syncing to Entra ID through the Entra Connect agent.

Official site: Rippling.

Okta Workflows

Okta suits companies where AD is one source among many apps. The Okta AD agent imports AD users and groups into Okta, and Workflows builds no-code flows for joiner and leaver steps in the apps Okta connects to, so the last working day can trigger access removal everywhere at once.

The Okta pricing page includes Workflows in every suite: 5 flows in Starter and Core Essentials, 50 in Essentials and unlimited active flows in Professional and Enterprise. Lifecycle Management is included in Essentials and is an add-on for Starter.

Best for: Cloud-heavy teams where most onboarding work is in SaaS apps, not in AD.

Pricing:

• Starter: $6 per user per month, billed annually
• Essentials: $17 per user per month, billed annually
• Professional and Enterprise: contact sales
• $1,500 annual contract minimum

Watch out for:

• The $1,500 yearly minimum rules it out for very small teams that only need a Z-Hire replacement.
• Five flows in Starter run out fast once onboarding, offboarding and role changes each need their own.

Official site: Okta Workflows.

Cayosoft Administrator

Cayosoft matches Z-Hire's HRIS connectors more closely than most. The Cayosoft Administrator page lists direct integrations with Workday, SAP, ServiceNow, BMC Remedy, Jira and Okta, so a hire record or ticket can start the account.

It automates onboarding, role changes and offboarding across AD, Entra ID, Microsoft 365, Exchange, Intune and Teams, with scoped delegation and an audit trail of who did what.

Best for: Mid-size and large hybrid estates that want Workday or ServiceNow to drive accounts.

Pricing:

• No public price: request a demo for a quote
• 25-day free trial

Watch out for:

• A 25-day free trial is available; pricing is by quote.
• It is built for larger hybrid estates and may be more than a 50-person office needs.

Official site: Cayosoft Administrator.

How to choose

When to stay with Z-Hire and Z-Term

Paying for Zohno makes sense if you still create Google Workspace and on-premises Exchange accounts from one template, which few rivals here do in one step. It also runs as a desktop app with no server to maintain. Multi-year licences are available on request; no price is published on the Zohno buy page.

Frequently asked questions