Use-case: How to create rules to automatically update user attributes?
Scenario 1: Modifying users' group memberships automatically when their departments or cities are changed due to organizational restructuring/transfers/mergers and acquisitions. Scenario 2: Updating the manager attribute depending on the values in the department. Organizational restructuring, M&A, and other developments often call for a change in the departments and cities of employees. With these changes, there arises a need to change the group membership as well. For example, an employee shifting
ADManager server using a lot of disk space
Hi, The disk space usage for our ADManager server has increased over the years. Currently the folder size for ADManager plus stands at 30GB. I have see high usage in the below list of folders located at C:\ManageEngine\ADManager Plus\. Backup 2.7GB logs 2.5GB mysql 16.5GB Patch 3.5GB temp 1.7GB Four of these 5 folders seem that could use some cleanup. However, the mysql folder, though carrying the database, but would 16.5GB size make sense for an ADManager instance? Can any maintenance jobs be run
Getting O\U Object rights listings
Hi All I have an external auditor who stated that AD Manager can generate a list of OU object’s right list, which will allow us to identify the privileged group from the permission level. They stated that the following columns need to be included: TargetObject AccountName AccessControlType Rights The reason for this report is we need to identify privileged users based on their group assignments. The auditor could not tell me what report I needed to use for this. Anyone have
ADManager Plus - TFA on only "Super Admins"
Hello, Is it possible to only enable TFA on "Super Admin" accounts only? I'm in the middle of setting up ADManager Plus right now and we will be having HR personnel using this to create New User Requests. But I do not want to require them to use TFA if they don't have to. Thank you!
Use ADManager to sync users from external Active Directory into Active Directory managed by AD Manager
Hi I'd like to use AD Manager to import and have a scheduled sync of user accounts from an external Active Directory via AD Manager to the Active Directory managed by AD Manager. Is this possible. It would only be basic information. It's mainly to sync displayName and SIP URI AD attributes only (the rest would be filled via an AD Manger template). thanks
Unable to delete users
Unable to delete the User.Access is denied. - Error Code : 80070005 Our Account logged into AD manger is Domain Admin, The account I'm trying to delete is in a Different sub domain, This domain is conencted with its own service account into Admanager. Cheers
Resize pop-up screens?
Is it possible to resize screen to see value - see attached image where we have number of OUs starting with same name - but we need to hover over each one to see exact value. Thanks! N.
Free Webinar: Ensuring security and consistency of end users' self-service actions in Active Directory
Free Webinar: Ensuring security and consistency of end users' self-service actions in Active Directory As an IT administrator, I'm sure you would have witnessed troubles, at some point in time, with user's self-service actions. It could have been something as simple as updating a wrong telephone number which could lead to a disaster while deploying multi-factor authentication. We, at ManageEngine ADSelfService Plus, aim at making user's self-service experience smooth and thus pay utmost attention
How to Find Active Database
Hello Help Desk, I was wondering if there was a definitive way to see the databases that are currently being used by the ADAuditPlus and ADManagerPlus programs. They reside on the same database server (MSSQL), but there are two databases for each program and I'm not sure which is actually being used in production. I ran queries to see the current processes in the databases, but I don't feel like I can fully rely on that. We're running out of disk space and I'd like to figure out which databases are
Failure - Problem with starting server ----received process interupt
Wrapper log is as follows on last attempt to run -run.bat STATUS | wrapper | 2013/08/13 14:35:49 | --> Wrapper Started as Service STATUS | wrapper | 2013/08/13 14:35:50 | Launching a JVM... INFO | jvm 1 | 2013/08/13 14:35:59 | Wrapper (Version 3.2.3) http://wrapper.tanukisoftware.org INFO | jvm 1 | 2013/08/13 14:35:59 | Copyright 1999-2006 Tanuki Software, Inc. All Rights Reserved. INFO | jvm 1 | 2013/08/13 14:35:59 | INFO | jvm 1 | 2013/08/13 14:36:26 | Starting Server
Possible to do a new user request like this?
We're looking to automate our new user set up process. What I'd like is for our users to hit a web page, type in the info, select some applications that this user will need, then the request gets submitted and if approved would create the account and make them group members of different groups based off the application they selected. Then when it's done spit out an email to the person who requested the set up, with the login information for the new account. I've only recently (like the past few
Free Webinar on 'Empowering your IT help desk for AD management'
Free Webinar on 'Empowering your IT help desk for AD management' June 20th Reserve your seat When you're an IT administrator, Active Directory (AD) and IT service management go hand-in-hand. You're in ADManager Plus day in and day out—managing and reporting on AD, Exchange, Office 365, and more—and you spend a good chunk of your day responding to requests in ServiceNow. From this webinar learn how to empower your ServiceNow technicians so that they no longer need to struggle to toggle around
Problem while Starting Server System going to Shutdown --- received process interrupt
Hello, I can not start the AD Manager service. it is giving the error below: It was working fine untill the disk ran out of space. I increased the space on the virtual machine but same problem. I am running Ad Manager Plus 6100 on windows 2012 R2 Datacenter. Problem while Starting Server System going to Shutdown --- received process interrupt Thanks, Hani,
Automation Alerts
How can I turn off alerts for automation task - like automations to add people to groups?? It's driving me crazy.
Pass the newly created user account to the Custom Powershell scripts
Hello, I've created a Powershell script that run only on successful user creation. I need to pass the newly created username to this script in the command line using a variable. Is there a way I can pass the newly created user account values to my Powershell script? I've tried %USERNAME% but that it's not working. My script works perfectly when it's executed outside of ADManager but not when it's run by ADManager. I guess it's because I'm not using the right variable. Thanks
User based login to different domain controllers
Can ADManager plus point to different DC based on the end user? In larger orgs, it takes time to replicate the changes, causing delays. A computer moved from one OU to another can take up to 20 minutes because it is being done at another site and must replicate.
Greater scheduling options for succsessive tasks
Hi We have a requirement to schedule the enabling\disabling of around 120 accounts on a regular basis. The accounts are put into various sized groups and are currently manipulated manaully. The accounts are used for student exams so it is important that they are enabled\disabled at the appropriate time. ie. Week 1 Group 1 Monday 09:00 - 11:00 Group 2 Monday 10:00 - 11:45 Group 1 Thursday 13:30 - 16:00 Group 2 Friday 10:30 - 12:00 Week 2 Group 1 Wednesday 14:00 - 16:00 Group 2 Tuesday 14:30 - 16:00
ADManager Plus rolls out build 6580
ADManager Plus Build 6580 (June 2017) New Features: Active Directory management notifications: This feature notifies all the relevant stakeholders via email and/or SMS, whenever an AD, Office 365 or Exchange management action is executed. Further, the notification messages can be customized based on the management action performed, the domain in which it is performed or the technician who is performing the action. Litigation hold enabled Exchange Online mailboxes Report: View all the Office 365 users
Delete Account Custom Script - Username not passed to script?
As part of our account deletion, I configured a custom script to run against the username (under Admin->Delete/Disable Policy). However, the command isn't being passed the username or department when I use the %username% and %department% variables (they work for all other custom scripts I've implemented with ADManager). Is this functionality not available when an account is deleted? Or is there something I'm missing? Custom script I'm running: powershell c:\AcctScripts\RemoveFDrive.ps1 -Username
ManageEngine ADManager Plus service not starting
Hello. I am getting this error while trying start the ManageEngine ADManager Plus service on my Windows 10 machine: "The ManageEngine ADManager Plus service on Local Computer started and then stopped. Some services stop automatically if they are not in use by other services or programs." How do I fix this?
ADManager Plus reports cannot be show under "Scheduled List"
HI, Please be informed that we encounter a problem is that we checked our "Scheduled List" and it will said "No existing Schedules". As we checked, we still can received the schedule report via email and we check "Scheduler History" and the report status is normal. May I know how to get back the report in "Scheduled List"? Thanks
Ad manager Plus Instalallation
Hello, We have just purchased Ad Manager and we are about to install the software. We already have Ad Audit Plus installed on a dedicate machine, a windows Server. We were wondering if we could install Ad Manager on the same server, because it seems to me both products are modules of the same software solution. Is this correct ? or is it recommended to install diferente parts on diferente machines ? Best regards Luis silva
REgional Settings
Hi, Does anyone know how to amend the date format in ADManager+ ? (Ours is US for some reason) A
Division Attribute Field in ADUC
Hello, How can i enable the hidden user attribute "division" in my ADUC user properties. we'd like to utilize this hidden field but i am having trouble finding the instructions and thought perhaps our ADManager Plus could handle it easily. Thank you. Scott (new to the forums and ADManager Plus / ADAudit).
NTFS permissions for DFS file share
How do we acquire NTFS Permissions for a DFS file share?
Issues with AD Manager Plus High Availability in an Azure environment
Has anyone else had issues configuring ADManager Plus High Availability in an Azure VM environment? I have been working with ManageEngine concerning the issue for a week or so. The tech, I have been working with, said our configurations are correct. He has not been able to get it working either even re-configuring HA multiple times. He is checking with the developers for possible issues with Azure. This is within a government Azure tenant. I am hoping that it is not an issue with ADManager
CSV Export not using correctly formatted attribute names
Hi, I'm trying to set up an automated task that reads from a .csv that ADManager creates. The two columns in the report are SAM Account Name and a custom attribute (extensionAttribute3). What I find is that when ADManager runs the report the column headers are whatever AD Manager has listed for the attribute. So in this case for SAMAccountname it exports as SAM Account Name in the .csv, thus the automation modification task can't run because there are spaces in the attribute name. How can I fix this?
Computer Bitlocker Status report
Hi, I just upgraded to v6.5.70 to have a look at the Bitlocker status reports but I can't find anywhere where I can run this report from. I also ran the all computers report but when I tried to 'add columns' there's no mention of a botlocker status there either. can anyone point me in the right direction please? Thanks.
Free ADManager Plus online workshop series
Free ADManager Plus online workshop series June 6 - July 6, 2017 Every Tuesday, Wednesday, and Thursday Save your seat ManageEngine's most sought-after workshop series on ADManager Plus is back due to popular demand! This series, comprising of 5 workshops, will get up close and personal with various features of ADManager Plus, and explain how you can leverage the product with the help of real-time use cases. Agenda: These workshops will show you how you can: Manage group membership and file server
Extending the functionality of ADManager Plus
Hello We're looking for a product that will meet our AD account provisioning needs, so we decided to test ADManager Plus. I installed the trial, and tried to find the following functionality, but have not been very successful: 1. Configure validation rules on certain AD attributes, for example we need the Employee ID to have a fixed length of 6 digits. 2. Prefill AD attributes from (or validate them against) external data sources, e.g. the HR database. Is it actually possible to extend the functionality
Automation with Policy including a template = Cannot run by report
I'm new to ADManager, but am trying to configure an automation policy to run on expired accounts (a 90 day deprovision policy). I can create the automation policy fine, but when I try and tie it to an automation, I am limited to running the automation against a CSV file. I've discovered that, if the automation policy does not include an account modification template I can run the automation against a report instead. Why can't I run an automation policy against a report if I'm modifying accounts
Moving multiple users between multiple OUs via CSV
Trying to do some AD cleanup and need to move multiple users around between multiple OUs. All the users in the csv file will not be in the same source OU, nor will the users all be going to the same destination OU. My csv file has the destination OU for each user. Is this possible via csv import? Thanks Pete
UI Style of AD Manager
Hi, When you planned change current UI Style of AD Manager Plus to New Style like in an another products of ManageEngine (ADAudit for example)?
Disable policy not passing " in custom script
I am using a custom script for account creations and passing the following just fine: customCREATE.bat "%physicalDeliveryOfficeName%" %username% When I try to do the same in the custom fields for disabling an account, the quote is transformed: customDISABLE.bat "%physicalDeliveryOfficeName%" %username% I am scripting off of the office field because they all have their own file servers. The problem is, we have some offices with two-word names, so there is a space. I need to pass the quotes
Setting Home Folder directory using Modificatio Rules
I created a new user modification template to change user attributes and have the template add a Home Folder using the Modification Rules. Hass any one had any issues when applying the a template to an user and the Home Folder was not modified. I can set other AD attributes such as group memberships, description and department. These fields are getting modified when template is applied however the Home Folder is still set to the previous value. In my case their is not home directory set for these
File server management feature missing?
Hi everone, i'm testing AD MAnager Plus and I've notice that "file server management feature" is missing in my control panel. Is necessary to activate this feature? Do I have to install anything else? Thanks in advance.
admanager CSV import problems with characters like æ ø å ö ä ü
after the csv import the letters ö ü ï are not displayed properly. -- coördinator shows as co�rdinator.... Is there a way to fix that?
AD Reports in Excel
Hi. I think this issue came after a servicepack update We have a scheduled report based on following: Get members of several specific AD groups (361 groups). The report are delivered in XLSX When we receive the Spreadsheet, every single group are made as a new sheet inside the spreadsheet. So in this case 361 sheets . What we want is a single column with the AD group name so that we are able to sort the data. Now we have to look into every sheet. I tried to do this with a CSV file, but I am not able
How i can Install AdManager Plus and AD Audit in my DB SQL 2008 ?
greetings, i have a licence for ADManager and ADAudit, but we dont want to work with the DB Postgres, so we want to use our SQL 2008 how i can install both programs with this DB, i apreciate some guide for this.
Populating Attributes that have String( Generlized-Time) as syntax
Hi, I have a custom made attribute in our AD that is set to be a String(Generlized-Time) syntax. That we have been using for years. And if I look at the attribute on a user. The value looks like this, 20120601000000.0Z This is for a user that are created on the, first of June 2012. (HR are using a simulare tool as AD Manager Plus to add new users to our AD, with this this information to the attribute.) But when I try to populate this attribute from AD Manager Plus, I get a error that the format is
Next Page