New Release: ADManager Plus 7060 (August 2020)
We are excited to let you know that the latest version of ADManager Plus--build 7060 has been rolled out. You can download it from here right away! The details of the release are mentioned below. New Features Site Based Delegation: This allows you
Creating REMOTE Shared Mailbox in AD Manager?
On 6659 of ADManager Plus. O365 with Hybrid Exchange Setup. We are successfully creating user mailboxes now with ADManager as Remote Mailboxes, works perfectly. We want to move our process of creating Shared Mailboxes to ADManager as well, but we don't
UltiPro Integration setup
Hi All, We have configured the UltiPro connector and field mapping to the UltiPro fields in the database. On running the task we never see any accounts created nor even connecting to UltiPro. Anyone else got this to work and pointers would be really helpful. Thanks in advance Andrew...
The NCSAM series part-2 - Securing Devices at Home and Work
October is officially recognized as the cyber security awareness month all over the world, ever since it was started by the National Cyber Security Alliance (NCSA) and the U.S. Department of Homeland Security (DHS) in 2004. This year, the theme for the
The NCSAM series week 1 - If you can connect something, protect it.
October is officially recognized as the cyber security awareness month all over the world, ever since it was started by the National Cyber Security Alliance (NCSA) and the U.S. Department of Homeland Security (DHS) in 2004. It is aimed at educating people
How to integrate ADManager Plus with BambooHR for automated user provisioning?
An effective user provisioning process should form the first line of defense against data security, secure access to critical data and resources, etc for any organization besides being time-efficient and risk proof. ADManager Plus can help you with setting
Technicians cannot navigate between tabs within the "Modify User Properties" window
Almost all of our agents have recently lost the ability to navigate between tabs after clicking into user's "Modify user properties" window. When they click on any tab (Account, Contact, Exchange, etc) nothing happens and the screen does not change. This is the same across any browser, after all browser resets/cache clear/etc. This started after a failed install of the latest version of ADM+, so we are still currently on 7056. Before the attempted upgrade this was not an issue. Has anyone seen this
Office 365 integration steps and procedure?
Hi Folks, I need some help in how to configure the Office 365 integration properly: https://PRDSVR-AD02:9352/Office365Tab.do?selectedTab=o365 It is always sitting like that eventhough I have entered my own Global Admin account and then click on Synch button. 1. Can I use Global Reader user to integrate with the Azure & Office 365? https://techcommunity.microsoft.com/t5/microsoft-365/azure-active-directory-global-reader-role/m-p/1029945 2. How can I get the benefits of Office 365 integration with
Identity Governance (IG) Myth #4: IG is needed only if your industry has mandatory regulatory compliances
Identity Governance (IG) is a framework that helps to render the vital security policies and practices in place for your organization. Compliance regulations are only mandated by governments to increase data security and privacy. So IG, when used in the
technician unable to change template
We have some custom user creation templates setup but technicians are only able to use the default one. They're unable to select a different template. They seem to have the proper permissions set in AD delegation.
Bulk Edit Users via CSV - Missing Match Criteria
I ran a report of users missing Description. I then edit the Description and attempt to import those changes. However, when I select CSV import, I select Description to be modified. Then when I try to select the match criteria only Title, Description and Department are listed. Why can't I match on SAMAccount name?
Error on automation of new user creation
I've been using ADManager Plus to manually upload CSVs of new users each week and let ADM handle the creation. That has worked flawlessly, so I wanted to move towards automation, but I've been getting an error. When I check the execution history, it says: "Unable to raise the request. No results for selected criteria this time. " I can't find any reason it would not work, as it's been working fine manually. The CSV is formatted the same. Since that error doesn't give any real information, I have
thumbnail photo
Im trying to automate import of photo to active directory. I can do this manually or automatically BUT I want to import pictures only for users that have no picture already, all other shall not be updated. And I want this automated every week. How can I do this?
prevent duplicates in ad manager plus user creation template
i've done this : https://www.manageengine.com/products/ad-manager/admanager-kb/append-numbers-to-logon-names-in-case-of-duplicates.html but i'm still getting the error saying that the object already exists. what am i missing?
How to simplify user management by integrating ADManager Plus with BambooHR
By integrating BambooHR with ADManager Plus, you can import user details from the HR software into ADManager Plus automatically, and create user accounts in AD using those details. By doing this you no longer have to spend time manually creating a CSV file with user details and writing a script to import or export the CSV files. Steps to integrate ADManager Plus with BambooHR to create users in AD: 1. Enable integration between ADManager Plus and BambooHR Logon to ADManager Plus and click
Where can I find the release notes on the latest builds?
Where is the info on the latest build?
White Screen After Login
Hello, I am having an issue with the server and i think Java Memory. I have increased the initial and maximum memory to 1024 and 2048 respectivly. When users login maybe 30 minutes after the AD manager service is started, they just get a white screen. I have to restart the service for AD manager to work. I am working on a trial version most recent 64 bit build. Is there anything else in the wrapper.conf file that needs to be adjusted? Thank you
ADManager Plus users
Newbie here. Just had this project, to implement ADMP in our environment and create processes around user administration mostly. I find that the ADMP documentation is very heavy on the sales side of things (how ADMP can cut your repetetive admin tasks) but extremely light on the how to side of things. I'm currently trying to figure out the users inside ADMP itself and why, when I modified some users, they got moved into the Direct Users group in ADMP. Every time I search for users or ADMP users
Admanager Office365 interval
Hi Team, Currently our admanager fetching information every 24 hours from office365 and its super hard to check recent modifications. how can i reduce that interval from something else. Thanks, Ronak
On Prem AD and O365
What is the best tool managing users for O365 and an on premise AD environment?
Checkbox problem "Enable tight integration with ServiceDesk Plus."
Hi sir, I've a issue with Enable tight integration with ServiceDesk Plus.. The checkbox doesn't seem to stay enabled. Is this a limit of our trial? Thank u
when a technician performs undelete users, he can see eveyrthing
i have a technician limited to specific ou in all actions, everything if fine, he's limited. but when he does undelete user, he can see all the undeleted in the organization. how can i prevent that?
Local Accounts on a Domain Controller
Hello and thanks for reading this My basic understanding of the process of promoting a server to a domain controller includes "hiding" or removing the local SAM database. Some articles say it gets deleted and accounts move into the Domain SAM, some articles say the local SAM database is still there and accessible if the server is put into Directory Services Restore Mode (DSRM). Here's my question, and I'd like to ask it in the context of a bad actor gaining access to a domain controller which is
Setting Account Expiration
Has anyone had an issue not being able to set an account to expire past one day? Within ADManage if I set an account to expire anything further out past one day it looks like it takes it, but when I check it in Active Directory is shows to expire within the same day. Example: Today's date: 04.07.2020 ADManage set account 'testuser01' to expire 05.01.2020 Active Directory shows account 'testuser01' to expire 04.07.2020
prevent technician from seeing upn
hi. is there a way to prevent a technician from opening the drop menu that shows additional upns? see attached, circled in black to demonstrate
Create Additional Mailbox
So here is what I am trying to do: As part of user creation I have it creating an onsite mailbox with exchange, but I need to create another mailbox for that user for our Avaya phone system. For example: User: Rob Hawker username: rhawker I create a mailbox for rhawker, but I also need to create a mailbox for "VMRhawker" This is a separate mailbox from the rhawker one. I am trying to accomplish this by running a customer script. : Add-PSSnapin Microsoft.Exchange.Management.PowerShell.E2010; $user
Custom Script not working
I have a custom script that does the following: param ($param1) Add-ADGroupMember -Identity VPNUsers -Members $param1 in the custom script field I have: C:\ManageEngine\Scripts\add2group.ps1 %username% The response to the user creation action states: Custom script result : Success and the log states: [11:19:09:074]|[03-06-2020]|[ADMangLogger]|[INFO]|[119]: CustomScriptDetails: {IGNORE_WARNING=false, SCRIPT_COMMAND=PowerShell -file add2group.ps1 'T2atest', SCRIPT_ENABLED=true, MAX_WAIT_TIME=5}| But
Post Termination script remove office365 license, remove from distro
I created a script that goes beyond just what admanager plus offers. This is mainly for hybrid environment. after the account is disabled and moved to disabled OU using template, Script connects to office 365 and removes the disabled user from any distribution list Then it checks for which license the disabled user had and removes the license Script changes the disabled users description field to today's date and time in your local AD It hides the disabled user from Address book on local exchange
Custom Script question
I'm running this custom script inside a template Powershell -ExecutionPolicy Unrestricted C:\ManageEngine\scripts\testname.ps1 %username% Testname.ps1 (powershell script) param($user) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -noexit -command ". 'C:\Program Files\Microsoft\Exchange Server\V15\bin\RemoteExchange.ps1'; Connect-ExchangeServer -auto " Set-User -Identity $user -RemotePowerShellEnabled $falseBut it seems to be not working. I get "Custom script result: Custom script is running
Modify User Template
Hi, We have recently moved to Exchange 2013 and use AD Manager Plus for our management team. This is working fine and he User Creation template sees and assigns the new Exchange 2013 DAG and relevant database for a new user. However when we use teh Modify User template on the Exchange tab we used to see the server and database but now it shows "choose an exchange server" and "Choose a Mailbox Store". Is there something I have missed here or is there something I need to do to get it to show the server
Re-enable, Move User, Set Expiration Date for Bulk Users
Hello, Wondering if anyone has a solution for this scenario? We automate account creation (bulk) from CSV. Rule is not to create if duplicate on Full Name. Which is good and what we want. However, a large portion of the bulk accounts exist as they are returning students. Some accounts are disabled, moved to a terminated OU , etc.. So I'm looking for a way to: 1) Target only those accounts that already exist ie: those not created and listed as error on the usercreationstatus output of bulk creation
How to unlock locked out AD user accounts automatically using ADManager Plus.
With ADManager Plus, you can configure a scheduler that automatically identifies all the locked out AD user accounts in your domain, and unlocks them. Steps to unlock locked out AD user accounts automatically using ADManager Plus 1. Login to ADManager Plus. 2. Click on the Automation tab and click on the Automation option available on the left pane. 3. Click on Create New Automation. 4. Enter a suitable Automation Name and Description for the automation. (For instance, you can name this automation
How to modify the logon name formats of all existing Active Directory users using ADManager Plus
ADManager Plus enables you to define a custom format for different naming attributes in AD. Once you have created a custom naming format, you can apply it to multiple AD users, at once. Steps to create a custom naming format using ADManager Plus: Let's assume that the new logon name of a user whose FirstName is John and LastName is Smith, must be S.John@domainname.com For this: 1. Login to ADManager Plus and go to the Admin tab. 2. In the Custom Naming Format section, click on Add New Format.
Custom Script not executing.
I have created a custom user creation template that obviously creates the user in both on-prem and O365 as well as some custom attributes necessary in our environment. In addition to these custom attributes there is a script that I would like run after the user is created. This script has the sole purpose of enabling the user account with Multi-Factor Authentication. In tests, while running the same exact script from power shell the script performs all actions as intended without delay and without
Any way to limit O365 Global Admin account other than username / password?
Currently the only way to provision O365 accounts / mailbox through ADMP is via Global admin username / password in the app - UI. Is there any way to lock down the permissions or use Conditional Access to limit access from a single IP or have MFA on the account or use API? Please and thank you.
How to revoke the licenses of inactive Office 365 users using ADManager Plus.
ADManager Plus enables you to generate crucial reports on Office 365 objects like users, groups, contacts, and more. With ADManager Plus, you can revoke the licenses of multiple inactive Office 365 users at once. Steps to revoke the licenses of inactive Office 365 users: Logon to ADManager Plus and navigate to the Office 365 tab. Click on Inactive Users report listed under the Account Status Reports category of the User Reports section. Select the Domain and OUs of your choice. Select the
Import Bulk Manager's in Active Directory
How to import Bulk User Manager's in Active Directory via ADmanager software?
How to enhance your Active Directory (AD) group membership reporting using ADManager Plus
ADManager Plus, a web-based Active Directory (AD) management and reporting solution, also acts as an efficient AD group reporting tool. ADManager Plus offers prepackaged reports that help you list Active Directory groups, get detailed group membership information, and more in just a few clicks. Furthermore, you can perform management operations from within these reports. Detailed Group Members report View the complete list of all the objects that are members of a specific group, and use filters
Notification Macros
Hello, In sending out onboarding notifications, we would like to include IP Phone and Telephone attribute fields. I do not see them in the list. Is there a way to include these?
Non english symbols in first and last name
Hello, Is it possible disallow non English symbols in first and last name in ADM Plus? Regards, Anton
Next Page