Using ADManager Plus' templates to modify users through CSV import
Modifying user accounts is often done to assign roles or access permissions, change titles, move to or remove a user from groups and other critical actions. When done manually, it is prone to human errors and is time-consuming. The user modification templates
Disable users NOT in CSV file
We import and create ad users from a CSV file built on these attributes DEPARTMENT,GIVENNAME,USERPRINCIPALNAME,PWDLASTSET,HOMEDIRECTORY,DESCRIPTION Once a user is removed from this CSV file, the corresponding active user account created has to be disabled.
Adding Custom Attributes to ADManager Plus
I am trying to add the 4 new attributes added in 2008 R2 msDS-FailedInteractiveLogonCount—The number of failed logon attempts at a Windows Server 2008 server or a Windows Vista workstation since the last interactive logon feature was enabled msDS-FailedInteractiveLogonCountAtLastSuccessfulLogon—The total number of failed interactive logons up until the last successful Ctrl-Alt-Del logon msDS-LastFailedInteractiveLogonTime—A time stamp of the last failed logon attempt msDS-LastSuccessfulInteractiveLogonTime—A
Accessing Existing Attributes
I regularly use msDS-cloudExtensionAttribute1 and msDS-cloudExtensionAttribute2 in my AD. These attributes are already set for many users, is there a way to import these attributes for users where it is already set?
Deprovisioning best practices series #3: Regularly clean up stale accounts
Inactive user accounts are a major threat to an organization's security as they can be easily exploited by attackers to gain entry into the network. In order to keep the Active Directory clean and secure, it is important to ensure that inactive user accounts
AdManagerPlus
Hi everyone. I have a problem with reports in this App. All reports always showing only 100 entries. Is it license restriction on something different like specific settings. I have version 7.1.26 now in trial mode
Email Confirmation Steps for ADManager
Hii Everyone, I would like to ask you if is anyone who can help me with the problem below: I should create 2 steps of the email confirmation for: - Create Users - Reset Password - Modify Users As for the Unlock Users, I need one step of the email confirmation
ADManager Plus flagged for Spring4Shell vulnerability (CVE-2022-22965)
Anyone else having their ADManager instance flagged as having Spring4Shell vulnerability (CVE-2022-22965)? Does ManageEngine have any information on this? thx
View Mailbox Full Access ACL
Hello, I was wondering if there was a way to view a mailbox's full access permission list in AD Manager? I noticed that you can see the Send As list under the Modify Single users properties page but not the Full Access permissions list.
Is there a TOU banner when users access ADManager
Hi, my IT SEC group wants users accessing ADManager to occasionally be prompted with a banner containing the Terms of Use (TOU) for accessing ADManager, eg every 30 or 90 days. Does ADManager have anything like this?
Can't run from desktop icon
Hi After installing latest service pack I can`t run ADManager from the icon on the desktop. Running the command line from the BIN Folder : javaw.exe-Dproduct.home-..-Djava.library.path=..\1ib\native got 'javaw. exe' is not recognized as an internal
Deprovisioning best practices series #2: Standardized disable and delete policies
Improper off-boarding practices put organizations at the risk of losing critical data. For example, a former employee whose access permissions were not revoked could tamper with or even steal critical data causing confidentiality breaches. It can also
New User Creation Report (Audit Report) Customizable?
I'm a new user to ADManager Plus, and we have emails sent out to the team about Users that have been created with a PDF attachment sent with details. I have found the template where the email is sent from under Admin ->System Settings ->Notification Profile,
Security Hardening Prompt
How can I turn off the Recommended Security Hardening prompt on ADManager login? It is setup the way they wanted and I don't need to be prompted upon every login. I am running version Version : 7.1.0 Build Number : 7117. Thanks
Can Automation perform check - to avoid incorrect modification?
We use an automation to disable any accounts that have "never logged on" in 40 x days. We use the "never logged on" report that I think checks the logoncount attribute Yesterday, the script inadvertently disabled 55 x user accounts due to a WAN issue
AD Manager Plus Question - Security Sheet Process
We are looking into the possibilities of utilizing AD Manager Plus with User Creation, Modification and Termination. We currently use IBM's iSIM and iTim for this process. Other than using a .csv file and the single user form, is there other automation
Completely automated workflows
Is it possible to have completely automated workflows in AD Manager plus? That is, the robo requester submits a job and it follows a workflow that doesn't require any operator/admin approval before it is carried out? We're a college that are just getting started with AD Manager plus, and one of our issues is the automatic enabling and disabling of user accounts. Any of the current solutions we can see do not look too good, but it seems to me that if AD Manager Plus allowed totally automated workflows
employeeNumber instead of employeeID
Hello, I am new to AD Manager. How do we get employeeNumber instead of employeeID in the general tab of create user? In fact we want to make it a standard across all template as our organization does not use employeeID. Many thanks in advance.
Deprovisioning best practices made easy with ADManager Plus
Employee deprovisioning should ideally start well before an employee's last day in the organization. But in most organizations, complete deprovisioning of a user account and associated access permissions takes weeks or sometimes months, after an employee's
Ultipro (UKG) Integration very buggy
We are just trying to sync some Active directory fields from Ultipro but running into so many buggy problems, Does anybody else have this working ?
Unified HR and access management with ADManager Plus' HRMS integration
Organizations often use a HR management tool like Zoho People, UltiPro and other tools to manage their employees. But when it comes to identity and access management in these organizations, IT administrators struggle with synchronizing the HR database
Create group/Distro with all Direct and Indirect reports
We are constantly dealing with requests for distribution lists that are for all reports for a given manager, director, or VP. Currently we have to run scripts to do this on an individual basis and only 1 or 2 people know how to edit/copy these for new
Hidden Reports?
I inherited ADManager server. My supervisor receives a report for inactive users. I do not get the report. When I look at shceduled reports the inactive users report is not there. Where else can I find scheduled reports to change the recipients? FYI,
Error When Logging
Please see error in attachment when trying to login
Update 2 about Apache Log4j vulnerabilities (CVE-2021-45046 and CVE-2021-44228): Steps to protect ADManager Plus
Dear Customers, We have now released a new build which includes the precautionary measures to protect against the Log4j vulnerability. It is sufficient if you just upgrade your ADManager Plus instance to the latest build. Download the service pack, to
Enhance ADManager Plus security using the Product Security Hardening feature
Hi, We wanted to let you know that we've added a Product Security Hardening option to ADManager Plus in version 7116. With this option, you can configure security-specific settings of ADManager Plus from a central location to strengthen its security.
Asset Explorer - Failing to start
Hi there, I've been having issues with all my ManageEngine products and decided to uninstall and reinstall all products. Starting with AssetExplorer, I'm unable to start the Service. The service will start then stop on it's own. Asset Explorer gets stuck
Update regarding the Apache Log4j vulnerabilities - CVE-2021-44228, CVE-2021-45046 and CVE-2021-45105
Last updated on May 6, 2022. Hi, Three high severity vulnerabilities, CVE-2021-44228, CVE-2021-45046 and CVE-2021-45105, impacting multiple versions of Apache Log4j utility, were disclosed recently. As per recent findings, ADManager Plus versions 7121
Multi Domain Multi License management
Greetings, I'm currently running an On-Premise ADManager plus V7.0.0. I would like to manage multiple domains that each have theire own license file. Is there a possibilty to add/manage multiple license files on 1 ADManage instance? Currently i can only
ADManager Plus Custom Script Variable only passing first word in multi word attribute
I'm testing some custom scripts and when it is passing a variable that has more than one word it is only passing the first word. I'm testing this by piping the output to a text file. Here is what I have in the custom scripts field: PowerShell -ExecutionPolicy
can't login to panel by AD users
Hi, I have installed ADManager Plus. I can't login to panel by AD users I add Help Desk Technicians from my AD. when I try login to ADManager Plus it show me erro: For input string: "unlimited" I use Usearname: mydomain\myusername pass: my password
Log4j AD Manager Plus CVE-2021-44228
Hi ManageEngine, In regards to CVE-2021-44228, on twitter I read a post that AD Manager Plus has log4j 2.11 bundled in. Is this true? Will this be updated? Cheers
DateTime Picker (Date only?)
Good Day, I got a call from a user today, after we did an upgrade on the product from 6653 to7122 last week. I am not sure how it was before, but as the user is now complaining about it, it seems there has changed something. I don't use the product regulary
Auto Assign Only my users tickets
I am a manager and I have several users and I play the role of a technician. The scenario is: when these few users register tickets, I have to receive them and after the changes, refer the tickets to another technicians. How can I get tickets just for
Last Logon Time is 0 for a few computers
Hello, I'm new to ADManager Plus, just installed a test version... I tried the AD Report for inactive computers but there are a few computers with just 0 as last logon time. From AD side there is a logon time in the computer object(s). Is this a bug/known
Google Accounts not consistently being disabled or deleted
We are seeing issues with ADManager Plus and the Google integration where Google accounts are not always being, disabled or deleted when processed with the ADManager. The logs in ADM do not show anything, other than when it doesn't work, there is no log
Automation delegation
Hello! Please help me clearify the following situation: In ADManager Plus 7.1.0, we've got 4 Technicans with SuperAdmin-rights. If technican A creates a automation, is there any possibility for technican B the edit this automation? I know that technican
Donde puedo Adquirir Manage Engine en la Version 8.1.0 Construir 8112
Donde puedo Adquirir Manage Engine en la Versión 8.1.0 Construir 8112
How can I update the OTP email address of the Admin Account
I can see where the address is inside the "My Account" settings of Manage my TFA settings, but I can't change the email address associated with it. We are moving away from that email address so I want to update it to a new address.
Error editing GPO settings
Hello, When I try to edit a GPO by clicking on the "Edit GPO Settings" option, I get the following error: It happens with all the GPOs even the ones created directly from ADManager Plus. I can correctly do other actions like create/delete GPOs,
Next Page