Help Desk Technicians in AD Manager
I would like to be able for my Help Desk Users to be able to change offices, email address, title, department and manager when creating an AD account using AD manager, but so far the only way that I can enable them to do this is by giving them super admin rights, and that gives them more ability than I want them to have. I want to keep what they can do limited, but for what they do they need more access. Currently all that is available to them is enter the first and last name, and initial. For what
Built-In admin account counts as technician license?
I don't understand if I can not delete or even edit the built-in admin account then why is it counting against my technicians license? I don't want anyone to ever use built in admin account.
User Concurrent Login Restriction
I am looking to limit users on the number of concurrent logins allowed in an AD environment but it is not supported natively through Windows. Is there a means of limiting this through ADManager? What about Desktop Central? Thanks, Brian
Is it possible to access ADManagerPlus through a web service call?
I have a New User web application that is used to manage workflow of new users joining the company. I currently have a team that types information from the New User application into ADManagerPlus to create the user's account, email, etc. Is it possible to call a web service from within my New User web application to kick off the user account creation process?
Is there a trigger in the CSV file for Adding or remove Group Memberships
I would like to automate a task to automatically update group memberships. Adding users to groups works fine. Is there a trigger in the csv file that would tell ADManger plus to remove the group instead of add. Is it possible to have both add and remove in the same csv file? Thanks, Ryan Dearman.
How to ensure that Logon name and logon name pre windows 2000 are the same.
Hi there, I have set up my new user template to have logon name pre windows 2000 set to 'same as logon name' however if the logon name pre windows 2000 already exists then I will get a different logon name pre windows 2000 from logon name. We have a requirement for these to be the same all the time. Is there a way to ensure that if one is already in use that they look for a formatting of both the names to be the same? Please let me know if further clarification or information is required. Thank you.
Leaver template
Is there any way to create a template for a leaver that does the following? Removes the user from all AD groups Moves the account to the disabled user OU Hides the email address from the address book Disables the account. I think I can do most of the above other then removing the user from all the groups. Anyone found a way of doing this even if it means doing it in steps?
Send a welcome letter from a template as part of the workflow
As a part of our workflow for creating new users, we always send a welcome letter that we have templatized. Is it possible to have ADManager do this also as a last step for creating a new user in our workflow?
More password creation options
When setting up a new user and/or setting the password complexity rules, it gives you the option to select a dictionary password and/or the option to select a special character(s) or or number(s). The problem is that there is no way to do both. We currently use Monkey.train.ruler1 or similar to unrelated words together to create new and also rather secure passwords for our users. At current I cannot find a way to do this, however it doesnt seem like it would be that difficult to do since the framework
Disable Policy - Group Removal
Is there a way to remove users from certain groups, instead of ALL of them via the Disable Policy? I ask because we're not ready to move to Template-based user permissions (yet) and we need to leave Security groups on each disabled user's account. (believe me, I know the risk in that). Would there be some kind of an on-demand deprovisioning that we could create that would remove groups we designate? I could simply fill the removal list with all of our Distribution Lists, and if any of the groups
Groupmanagement on specific OUs
Hi there, I am trying to set up a new role for our application admins and it does not work as I planed it. Here ist what I have done so far: - added a new technican - chose a the role to edit groups, in this case to add and delete members - chose the right OU where the groups lay in If the admin logs in on the website he can see the groups but is not able to add users, which are in different OUs. For example: OU1 called DMS with several groups -> this OU I have added to the technican OU2 called Corp
Off-boarding user, export info and disable/move?
I see there are some features/options with the product, that can automate disabling and moving a disabled user to an OU and removing their attributes. But is there a way in the automation to first export/e-mail all the users' AD info (like running the powershell cmdlet "get-aduser -properties *") first, before doing the disabling and attribute scrubbing? The purpose of that would be to have a log of what attributes the user had before ADManager scrubs them. There is a Custom Script area,
Deprovisioning automation/policy question
Hello First thanks for the product. it's great. edit: doh, I'm so stupid sorry. I didn't realize in automation policy, you can have multiple "instant tasks". Is that the best way to do it if you want to disable a user, remove security groups, and move them to an OU, all in the same "task"?
How can I make my templates available for other users?
Hello, I have created some users creation and modification templates and Im the only one who can use them, I need to make them available for other operators. Dont know if there is an export/import feature or a way to make them "public" Thank you
displayNamePrintable attribute in User Creation Template
Hello, I need the ability to have the displayNamePrintable attribute in my user creation template. I've added a custom attribute but what I need is for displayNamePrintable to be the same as displayname so ideally I'd like the field type to be 'Naming Format' but the only options I have on the custom attribute when I add it to the template are' Single Line, Editable Dropdown, Dropdown and Date Picker. How can I make the custom attribute displaynamePrintable default to 'First Name Last Name? Thanks
Locked Out Users
Hi, We have setup the AD Manager to report of when users Lockout their Domain accounts, is there any way to find out which PC\Server this lockout was actioned against within AD Manager ? Obviously we could view the logs on the servers but just checking to see if there are any options that don't require buying another product :-) Any ideas would be appreciated. Andrew
How can we view the custom script result status in ADManager plus.
I have a User modification template which trigger a custom script that is a VBS script. When we click "Update user" the script run and does its job fine(Which in this case is to disabled the user and move it to another OU) . But i have error handling in my script and i want to be able to show the technician a confirmation that everything goes fine or if the script failed in some point if for whatever reason it happen. AD Manager seems to report a failure only when the script does not start at all
SIngle/Bulk Modify - match Logon name to E-mail address?
I was wondering if anyone knows how to make it where you can modify users in AD to change their UserPrincipalname to match their Logon name? Would this require a CSV or is there a way to do it built-in or with template?
hide from address book (automation policy)
I need to add a task while creating automation policy to hide the user from Exchange address book, can anyone help me to do that
Select all domains as default search domain
Is it possible to change the default search domain to all domains when searching for user to modify user.
Replicating security groups from existing to new user (already created)
Scenario: A new user account (User A) was created and the user has already logged in and is using the AD/Email Account. His account was not copied from an existing user and hence is only member of default group Domain Users. Now, the manager wishes to give User A the same access as an existing user (User B) who is a member of 100+ groups. Is there a way to copy all security groups from User B to User A using ADManager without deleting/recreating User A? Thanks in advance!
Can not add two users as manager(Owner) of Distribution group.
Hi Support Will this be added or fixed to allow my help desk to add two users a manager of Distribution group? Mike
Bulk Manage Folders & NTFS permissions
I am currently evaluating AD Manager Plus and was wondering if there was a way to create folders and set ntfs permissions using a csv file. I have a need to create several hundred project folders for our students at the start of each academic year which are broken down into course\username. These are then mapped using group policy preferences. I already have some code that performs the above but as an organisation we are trying to move away from in-house code hence the evaluation. It may just be
Notify Users Prior to Password Expiration and Notify Users Prior to Account Being Disabled
So I've looked through the forums, and I also took a look at some other products, and I think I probably no the answer to this question already, but I would just like some confirmation before I report back to upper management. We own ADManagerPlus, and we are looking for a way to notify/email users 2 weeks prior to their password expiration and to notify/email users 2 weeks prior to their account being disabled after 30 days of inactivity. There does not seem to be way to do this built into ADManagerPlus,
Google Apps - Organization - Moving Users
This article references the ability to move users between OU's in Active Directory https://www.manageengine.com/products/ad-manager/admanager-kb/isolat-users-move-them-to-another-container-ou.html Will it also move the user between the respective Organization folders in Google Apps? In our case our Organization Names in Google Apps would match the Active Directory OU names. Thank you
I would like to bulk change user titles for users
I would like to bulk change user titles. This is one attribute change only.
Timed User Locking
Hello Support team! Hope you are doing well. Can we lock a User for a specific period of time? For example, can we lock Employee1's account for 24 hours or from this date to that one? And after that 24 hours or period of time, his account gets unlocked automatically. Thank you in advance for your prompt reply. Regards, Ahmad
Create Single User - Select Template
Hi there, For non-Super Admin's, we can't seem to find the specific setting to allow technicians to choose the template when creating a single user. It shows the current default template, but the field is not changeable. Can you please advise on the option that allows a technician to choose which template to use when creating that specific user? Thank You, James Leitz
How to Automate Adding User Photos
Thank you so much for adding the ability to upload user photos! I am wondering if there is a way to automate this process? Ideally, I would like the upload process to look in a designated folder for .jpgs added within the past 24 hours and upload those. If uploading by most recent date isn't possible, I would be happy with a process that would upload all .jpgs in a designated folder at a daily scheduled time. Is this possible or will it be in a future release? Thank you!
Help with Custom Format username in 'A#####' format with random numbers needed
I need to create a new user template that utilized a alpha character and a random 6 character number (i.e. E234532). I can only find how to set specifically defined characters, not random. Is this not possible with ADManager?
User Creation Templates
Hi there, Is it possible to add groups that a user should be a member of upon creation to the User Creation Templates? Thank You, James Leitz
Automated Task
We want to set up an automated task to check users in a specific OU, 1) If they are members of the email distribution list that correlates with the OU that they are in 2) if not remove them from the incorrect one and add them to the correct one. Does anyone know of a way to do that with ADManager or would I need to find a different route Thanks in advance
Server 2013 file and storage services and SMB3
Can you confirm the *earliest* version on ADManager Plus which fully supports SMB3 for homedrive creation please? I.E. you DON'T have to uncheck the Encrypt data access box when creating the share on the storage which ADManager Plus will then use for Homedrive creation for new users? Thanks in advance
User creation with custom username
Good morning, We have the name structure as AZB, first letter is the first letter of the name in this case we can say Andy, last letter is the first letter of the surname in this scenario Bobby so we have a new user Andy Bobby, the middle letter is the alphabet in reverse this is our first user with the initials AB so we assign Z to them. Now in ADManager Plus is allows us to add a number if the name exists on the end of the name. My question is if it is possible to search for duplicates of the
User creation template AD Photo
Is there a way to upload an user's photo as a part of a user creation template? We have a default image we use for the AD photothumbnail until be get a real head shot from our employees. Photo is a jpg. I would love to stop using this separate AD Photo upload tool. Thank you
Bulk group removal
There does not seem to be the feature to remove users from a security en masse (i.e. via bulk import) in ADMP (6.1.7). Has this feature been added?
User Modification Templates problem
How can i add this attribute to User Modification Templates?
AD user object. Dail-in properties
Hi All I have a group of 900 users who i need to modify For a application what uses radius it is needed to put the acountname in the DAIL-IN tab section of each user account. In the attribute msRADIUSCallbackNumber So this attribute works in a single modifacation of the user. But i need to change 900 of them. What is the best way to do this ? Regards Tiemen
User Creation Template AD Photo
Is there a way to add a picture file to the thumbnailphoto AD attribute via user creation template in ADManager Plus? We are on build 6340. Thank you, Fred
Customizing Naming Formats
Hi, I've recently loaded an evaluation copy of ADManager on our test environment, and have a question with regards to creating a custom naming format. My company's naming convention uses the first letter of a use'rs first name and joins it to the full surname to create the logon name (e.g. John Smith will receive a logon name of JSmith). If the logon name already exists we then take the first two letters of the name and join it to the surname (e.g. if JSmith already existed the username would become
Next Page