Active Directory Bulk Users Modification


    Resetting Password

    ADManager Plus allows you to reset the password of bulk users in a jiffy. Also, you can configure the settings which force users to change their password in their next log on.

    Procedure:

    First, choose one of the available options in setting the password and configure the password settings of the users. Then , apply the same to desired users.

    Steps:

    1. Click on Management tab.

    2. In User Management, click on the Reset Password link in Bulk User Modification section.

    3. To reset the password, select the Reset Password check box and select any of the options for setting the password.

    4. To change the password properties, select the options as required.

    5. Select the domain and search the users. You can limit your search to specific OU's of the domain by clicking the Select OU link and selecting the OU's.

    6. You can import the list of users to be modified from CSV format or select the user from 'show All Users' list or Type a user name.

    7. From the listed users, select the users to reset the password and click Apply.

    To know about Customization of Passwords click here

    The change summary and the status of the modification can be verified.

    Roll over the mouse over the icon to see the attributes in the windows native UI.

    Note: For password reset to be successful, the new password that is specified must comply with the password policy of your organization's Active Directory.

    Modifying Naming Attributes

    The format for the users' Name, Display Name, Logon Name and SAM Account Name can be modified here.

    Procedure:

    You must first select the format in which you want to list the user's Display Name, Full Name, Logon Name and SAM Account Name. Then apply the format to the list of contacts which can be imported using CSV File.

    Steps:

    1. Select the AD Mgmt tab.

    2. Click the Naming Attributes link available under General Attributes. This opens the Modify Naming Attributes of the Users dialog.

    3. Select the name format from the given options. You can also create your own Format. Click here to know more

    4. You can now use one of the following options to list the users whose group attributes have to be modified:

    5. a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

      Or

      b) Use the Search option to find the user (Note: To list all the users, just click the Search button without typing anything in the Search box)

    6. Now, use the check box to select the desired list of user (s) and then click Apply

    The change summary and the status of the modification can be verified.

    Roll over the mouse over the icon to see the attributes in the windows native UI.

    1. Changing the Name format will change the name of the existing user account with all the other properties unaltered.

    2. Changing the Logon name and SAM account name may cause duplication, if one by the same name exists.

    Modifying Security Attributes

    This feature enables you to unlock the accounts that were locked due to bad log on or due to account settings.

    Procedure:

    First, either use the search option or import a CSV file to list the user accounts that need to be unlocked and then click apply.

    Steps

    1. Click AD Mgmt → User Management → Unlock Users
    2. From the drop down menu, select the domain in which the computers are located (Note: If you know the OU in which the computers are located, click the add OUs button and select the appropriate OU)

    3. You can now use one of the following options to list the users that have to be moved to a different OU.

    4. a) Import the CSV file (sample CSV file) which contains the list of users. On importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

      Or

      b) Use the Search option to find the computers (Note: To list all the users just click the Search button without typing anything in the Search Box)

    5. Now, use the check box to select the desired list of users and then click Apply.

    The change summary and the status of the modification can be verified.

    Roll over the mouse over the icon to see the attributes in the windows native UI.

    Enable / Disable users:

    It is mandatory for administrators to keep the Active directory clean .In line with the same, administrators prefer to disable computers that have been inactive for a long time, and then enable them when required. This looks easy if it has to be carried out for just a single computer, but becomes tedious if an organization has a large number of computers. This is when administrators can make use of this feature to Enable/Disable bulk computer accounts.

    How to Enable/Disable bulk user accounts using ADManager Plus?

    Steps :

    1. Look out for the options Enable / Disable / More actions in the user reports generated.

    2. Check in the boxes adjacent to the desired users to select them.

    3. Now you can Enable / Disable or perform More actions by clicking on the appropriate tab.

    Modifying Organization Attributes

    You can change the users' address and organization details, such as Title, Department, Manager.

    Procedure:

    First, enter values for organizational attributes of the users based on your need, then import the list of users on which the values must be applied and finally click apply.

    Steps:

    1. Select the AD Mgmt tab.

    2. Click the Organization Attributes link available under General Attributes. This opens the Modify Address/Organization Attributes of the Users dialog.

    3. Select the option to change and specify the value in the text field.

    1. You can now use one of the following options to list the contacts whose group attributes have to be modified:

    a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

    Or

    b) Use the Search option to find the user (Note: To list all the users, just click the Search button without typing anything in the Search box)

    1. Now, use the check box to select the desired list of user (s) and then click Apply

    The change summary and the status of the modification can be verified.

    Roll over the mouse over the icon to see the attributes in the windows native UI.

    Modifying Profile Attributes

    The user profiles, such as Profile Path, Logon Script Path, and Users' home folder can be modified easily this feature of ADManager Plus.

    Procedure:

    First, enter the values for Profile Path,Logon script and Home folder for the users based on your requirement and then apply the same to desired list of users.

    Steps:

    1. Select the AD Mgmt tab.

    2. Click the Profile Attributes link available under General Attributes. This opens the Modify Profile Attributes of the Users dialog.

    3. This feature allows You to modify log on script, profile path and home folder of users.Select the option to change and specify the value in the text field.

    1. Select the domain and search the users. You can limit your search to specific OU's of the domain by clicking the Select OU link and selecting the OU's.

    2. You can import the list of users to be modified from CSV format or select the user from 'show All Users' list or Type a user name.

    3. From the listed users, select the users for changing the profile attributes and click Apply.

    The change summary and the status of the modification can be verified.

    Roll over the mouse over the icon to see the attributes in the windows native UI.

    Note:

    1. Profile Path need not be specified, if it is a local path.

    2. When you specify the Home Folder/Profile Path in a network share, it is advisable to provide permissions only to the specified users to avoid any misuse/discrepancies.

    3. Logon Script specified should be located in SYSVOL\<domainName>.com\scripts directory in the Domain Controller.

    Modifying Contact Attributes

    Contact details of users are important to ensure prompt communication with the users. Hence, it is necessary to keep the contact details updated. With ADManager Plus, the details of users such as their telephone number, email, phone, IP phone and so on can be modified easily.

    Procedure:

    You have to first set the values for the attributes of the users based on your needs. Then, import the list of contacts to which the values must be set and finally click Apply.

    Steps:

    1. Select the AD Mgmt tab.

    2. Click the Contact Attributes link available under General Attributes. This opens the Modify Contact Attributes of the Users dialog.

    3. Enter values for attributes of the contacts based on your requirement

    4. From the drop down menu, select the domain in which the user (s) are located (Note: If you know the OU in which the users are located, click the add OUs button and select the appropriate OU)

    5. You can now use one of the following options to list the contacts whose group attributes have to be modified:

      a) You can import the CSV file (sample CSV file) which contains the list of users After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

      Or

      b) Use the Search option to find the users (Note: To list all the contacts, just click the Search button without typing anything in the Search box)

    6. Now, use the check box to select the desired list of user (s) and then click Apply

    The change summary and the status of the modification can be verified.

    Roll over the mouse over the icon to see the attributes in the windows native UI.

    Modifying Group Attributes

    You can add users to specific groups, remove from specific groups, and can set the primary group for users from here. To modify the Windows user group attributes,

    1. Select the AD Mgmt tab → Group Attributes

    2.                a) To add user (s) to a group:

                              Click the + button ( which is present beside "Add to Group" )

                              Select the group to which you to add the user (s)

                              Click Ok

                     b) To remove user (s) from a group

                              Click the + button ( which is present beside " Remove from Group")

                              Select the group from which you want to remove the user (s)

                              Click Ok

                             To remove users from all the groups that they are currently members of, select the 'Clear all Group Memberships' option.

                     c) To set the primary group for user (s)

                              Click the + button ( which is present beside "Set the primary group")

                              Select the Group which you wish to be set as the primary group for the user (s)

                              Click Ok

    3. From the drop down menu, select the domain in which the user (s) are located (Note: If you know the OU in which the computers are located, click the "add OUs" button and select the appropriate OU)

    4. You can now use one of the following options to list the users whose group attributes have to be modified:

      a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

      b) Use the Search option to find the users (Note: To list all the users, just click the Search button without typing anything in the Search box)

    5. Now, use the check box to select the desired list of user (s) and then click Apply

    The change summary and the status of the modification can be verified.

    Roll over the mouse over the icon to see the attributes in the windows native UI.

    Enable/Disable Active Directory Users

    This feature makes it possible to enable or disable multiple user accounts and also specify the account expiry date, at one go.

    Procedure:

    In the enable/disable users feataure, select the action (enable/disable) and also the appropriate account expiry date. Select the desired domain/the OUs. Locate the users to be enabled/disabled using the search option or specify the user accounts via a CSV file.

    Steps:  

    1. Click the Management tab.

    2. In User Management, go to Bulk User Modification --> Enable/Disable Lync Users

    3. In the 'Modify Account Attributes of Users' page,

      • Select the required option in Enable/Disable option, as per your requirement.
      • Use the Account Expires option to specify an expiry date for the account, if needed.
    4. Select the domain in which the desired user accounts are located; you can also specify the appropriate OUs using Add OUs option

    5. Specify the users for whom this task has to be performed using:

      • A CSV file, which has the users list, using CSV Import option
      • The search option to locate the desired users
    6. Confirm the users for whom this change has to be done by selecting the required users from the list of users fetched from the CSV file or by the search feature.

    7. Click on Apply to complete this operation.

    Move Users to a Different Container

    Using this feature, administrators can move bulk computer objects between Organizational Units depending on the needs of the organization.

    How to move User accounts between OUs?

    First, select the OU to which you want to move the users. Then, select the list of users that need to be moved by either importing a CSV file or by using the search option, and finally click on apply.

    Steps

    1. Click AD Mgmt tab - -> User Management - ->Move Users

    2. Click the + icon and select the container to which you want to move the users

    3. From the drop down menu, select the domain in which the users ( that need to be moved) are located (Note: If you know the OU in which the users are located, click the add OUs button and select the appropriate OU)

    4. You can now use one of the following options to list the users that have to be moved to a different OU.

    5. a)You can import the CSV file (sample CSV file) which contains the list of users. On importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

      a)Use the Search option to find the users (Note: To list all the users just click the Search button without typing anything in the Search Box)

    Or

    1. Now, use the check box to select the desired list of users and then click Apply.

    The change summary and the status of the modification can be verified.

    Configure Logon hours

    Using the configure logon hours feature, you can control when users can logon to the network.

    • Regulate user activity
    • Block out a malicious user and
    • Restrict users from accessing the network after normal working hours

    This feature lets you grant or restrict logon privileges for multiple users in just a few steps.

    Procedure:

    Specify the time/hours during which you wish to allow/restrict access to users, select the appropriate domain, specify the users to whom you wish to apply this logon hours permission and apply the changes.

    Steps:

    1. Click on "AD Mgmt" tab --> User Management'.

    2. Click on Logon Hours.

    3. To set the permitted or restricted logon hours for a user/ set of users

      • Click 'Select hours'.
      • Enter the logon time frame in the 'from' and 'to' field.
      • Check specific days or all days of the week to apply the chosen logon timings.
      • Click 'Allow' to grant users permission to logon to the network in the chosen time frame.
      • Click 'Deny' to restrict users from logging on to the network in the chosen time frame.

      • Note: Alternatively you can also set logon hours by,

        1. Selecting each hour manually from the grid.
        2. Clicking on the 'Allowed' option to provide round the clock logon privilege from Sunday through Saturday. To block out a user on all the days of the week simply click 'Deny'

    4. Once you have selected the logon hours,

      • Pick a domain from the drop down menu.
      • Choose the OUs for selected domains.
      • Click 'Import CSV' to search for a user by feeding a CSV file. Choose a file to import and click 'Go'
      • You can search for users by manually entering multiple user names separated by a comma.
    5. To view the list of all users in the selected domain and OU, leave the search field empty and hit the 'Search' button.

      • From the displayed list of users pick specific users and click on 'Apply' to apply the configured logon hours.
      • The results can be exported in HTML, CSV, PDF or XLS format.

    Manage Users' Photos

    This feature allows you to manage the photos of the users in your Active Directory. Using this feature, you can

    This page provides the steps needed to use the various options in the manage user photos feature, and also the frequently asked questions (FAQs) specific to the photo management feature.

    Upload/Modify the photo of a single user

    To upload a photo for a user or to modify (replace/crop) the existing photo of a user, follow these steps:

    • Click the Management tab.
    • In User Management, click the Manage User Photos link located under Bulk User Modification.
    • In the Modify Users' Profile Photos page, select the domain in which the user whose photo has to be modified is located.
      Click the Add OUs link, and select the desired OUs if you know the exact location of the desired user.
    • Locate the desired user using the search option located on the left extreme.
      Note:

      - While using the searching option to locate the desired user, you can specify the attribute (thumbnailPhoto / thumbnailLogo / jpegPhoto / Photo / exchangePhoto) based on which you wish to locate the user.

      - By default, thumbnailPhoto attribute will be used; to change, click the thumbnailPhoto link located just below the locate user option and select the desired attribute.

    • All the matching users will be displayed, along with their photo (if it is available). Click the desired user account.
    • The select photo window will pop up. This window will have the

      - Select photo option if the user does not have any photo.

      - Change photo, and Crop options if the selected user already has a photo.

    • To upload a photo for a user for the first time, click select photo option, select the desired photo and save.
    • To modify/change the existing photo of an user, click the

      - Click the change photo option, select the desired user, and save.

      - Click the crop option, make the selection and save.

    Upload/Modify the photos of users in bulk

    This feature gives you the flexibility to:

    • - Import all the photos from a folder and upload them to the corresponding users
    • - Import only specific photos and upload them to the corresponding users

    Steps to upload/modify user photos:

    • Click the Management tab.
    • In User Management, click the Manage User Photos link located under Bulk User Modification.
    • In the Modify Users Profile Photos page, select the domain in which the users whose photos have to be modified are located. All the users in the selected location will be listed along with their photos, if they have one.
      Click the Add OUs link, and select the desired OUs if you know the exact location of the users.
    • Click the Import Photos button located at the center of the window, just above the users list.
    • In the Import Photos window that pops up, specify the path of the shared folder where the users' photos are located. Alternatively, instead of importing all the photos from the folder, if you wish to import only specific photos from the folder, click the 'Select Photos' option, and then the 'Select Files' button.
    • Specify the naming pattern/attribute based on which the photos in the selected folder must be matched with their corresponding users in AD.
      By default, the displayName will be used; if you wish to use a different one, click the Edit icon located beside the file name pattern field and select the desired attribute/pattern.
    • Click Import to fetch all the photos from the specified location. The imported photos can be resized based on the requirements before uploading.
    • From the users displayed, select the ones for whom you wish to upload/modify the photos and click Update.

    Delete user photos

    This option allows you to remove the photos of users in your AD.

    Steps:

    1. Click the AD Mgmt tab.
    2. In User Management, click the Manage User Photos link located under Bulk User Modification.
    3. In the Modify Users Profile Photos page, select the domain in which the users whose photos you wish to delete are located. All the users in the selected location will be listed along with their photos, if they have one.
      Click the Add OUs link, and select the desired OUs if you know the exact location of the desired users.
    4. From the list of users, click the user whose photo you wish to delete.
    5. In the select photo window that pops up, click the remove button, to delete the photo.

    FAQs related to the Photo Management feature

    1. How can I modify the photo for only one (single) user?

    Locate the desired user using the search option provided on the left extreme of the manage user photos page; point and click the mouse over the desired user, select the relevant photo using the option provided in the window that pops up, and save.

    2. How can I apply a photo for an entire department?

    - Name the photo to be updated with exactly the same name of the department (for example: sales.jpg).
    - Choose the format value to be used (for matching the photo to the object) as %department%, Import the photo.
    - Review, select all the users and click Apply.

    3. The user I want to modify is not displayed when I search using the locate user option.

    This issue could be due to any of these reasons:

    - If the user account is a new one, click the refresh icon placed at the top left corner of the pane where the users are displayed, and search again.

    - If you are trying to locate the user using an attribute other than the displayName or sAMAccountName, chances are the value might have changed. Run the All Users report, locate the user, confirm the value of the attribute that you are using, and try again.

    - Sometimes insufficient permissions could also cause this issue; check if you have permission to view the users in the particular OU where the user is located.


    4. I am importing photos for bulk modification of users photos, but a particular user is not in the list displayed. What should I do?

    This issue could be due to any of these reasons:

    - Ensure that the size of the photo for the particular user does not exceed the the maximum limit. The maximum allowed size for thumbnailPhoto is 100KB, for thumbnailLogo it is 32KB, and for jpegPhoto and photo, it is 10MB.

    - If you are using an attribute other than the displayName and sAMAccountName as the file name format for importing the photos, the value for the particular attribute might have changed recently. Please run All Users report, confirm the value of the attribute and try again.

    - If the attribute used while importing the photos is a custom attribute, please ensure that it is configured in the Admin tab of ADManager Plus and has user reports selected in the associated reports.


    5. I have tried all the solutions mentioned in the FAQ but the issue still persists.

    We suggest that you contact our support team at support@admanagerplus.com, and we will assist you in resolving the issue.

    Modify Logon Workstation

    You can choose the list of workstations to which the users can/cannot log in.

    Procedure:

    First, set the workstation on to which the users can/cannot log in. Then, apply the same to the desired list of users.

    1. Select the AD Mgmt tab.

    2. Click the Modify Logon Workstation link available under General Attributes. This opens the Modify user logon workstations dialog.

    3. Select the option 'Allow all computers' to allow user to logon to all computers.

    4. Select the option 'Allow selected computers' to restrict users to selected computers.

    5. You can manually add or remove computers or click on the icon to select.

    6. Select the domain and search the users. You can limit your search to specific OU's of the domain by clicking the Select OU link and selecting the OU's.

    1. You can now use one of the following options to list the contacts whose group attributes have to be modified:

    a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

    Or

    b) Use the Search option to find the user (Note: To list all the users, just click the Search button without typing anything in the Search box)

      8. Now, use the check box to select the desired list of user (s) and then click Apply

    The change summary and the status of the modification can be verified.

    Modifying Inheritable Permissions

    You can modify the inheritable permissions of objects and users i.e. you can allow or restrict a object from gaining permissions from its parent object.

    Procedure:

    First, use the check box to decide whether or not the inheritable permissions will propagate from the parent object. Then apply the same to the desired list of users.

    Steps:

    1. Select the AD Mgmt tab.

    2. Click the Modify Inheritable permissions link available under General Attributes. This opens the Modify user Inheritable Permissions dialog.

    3. Use the checkbox to 'allow' or 'restrict' the inheritance from their parent object.

    4. You can now use one of the following options to list the contacts whose group attributes have to be modified:

    5. a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

      Or

      b) Use the Search option to find the user (Note: To list all the users, just click the Search button without typing anything in the Search box)

       

    6. Now, use the check box to select the desired list of user (s) and then click Apply

    The change summary and the status of the modification can be verified.

    Roll over the mouse over the icon to see the attributes in the windows native UI.

    Move / Delete Home Folders and Profile Paths

    This feature lets you perform the following actions for users individually as well as in bulk:

    1. move home folders to a desired location.

    2. delete home folders and clear their associated AD attributes.

    3. move profile paths to a desired location.

    4. delete profile paths and clear their associated AD attributes.

    You can also specify whether or not you want to retain a copy of the home folder or profile folder in its original location.

    Steps:

    1. Click the AD Mgmt tab.

    2. Select the User Management link, located in the left pane.

    3. Click the Move/Delete Home Folders link available under Bulk User Modification.

    4. a. If you want to move home folders to another location: 

      -Click the Move Home Folder option. 
      -Select  Move Home Folder To.
      -Specify the location where you want to move the home folders in the field provided. Only Universal Naming Convention path is supported. The format should be: \\file-servername\shared directory name
      -Select  Retain a copy in the original location, if you want a copy of the home folder to exist in its original location as well.

      b. If you want to delete home folders:

      -Click the Delete Home Folder option. 
      -Select  Delete Remote Home Folders.

      c. If you want to move profile paths to another location: 

      -Click the Move Home Folder option. 
      -Select  Move Profile Path To.
      -Specify the location where you want to move the profile paths in the field provided. Only Universal Naming Convention path is supported. The format should be: \\file-servername\shared directory name
      -Select  Retain a copy in the original location, if you want a copy of the profile folder to exist in its original location as well.

      d. If you want to delete profile paths:

      -Click the Delete Home Folder option. 
      -Select  Delete Roaming Profiles.

    5. Select the domain (and specific OUs, if you do not wish to perform this action for all users in the domain) to locate the users whose home folder/profile path attributes have to be modified.

    6. You can use either of the following options to specify the users:

      a. Import a CSV file containing users' details.

      -Click CSV Import.
      -Choose the appropriate CSV file from your computer.
      -Click  Go.

      b. The built-in Search option.
      -Enter the names and click Search. To list all the users available in the selected domain (or OU), simply click Search without typing anything in the field.
      -Select the desired user(s) from the list and click Apply.

    Modify Custom Attributes

    ADManager Plus allows you to add/ modify custom attributes that are present in Active Directory schema but not in ADManager Plus. You can use these attributes based on your requirement during user creation and modification.

    Procedure:

    First, enter the LDAP name, value and Data type of the custom attribute to be modified and then apply the same to desired list of users.

    Steps:

    1. Select the AD Mgmt tab.

    2. Click the custom Attributes link available under General Attributes. This opens the Modify custom Attributes of the Users dialog.

    3. Enter the LDAP name and value,then select the data type from the given options.

    1. You can now use one of the following options to list the contacts whose group attributes have to be modified:

    a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

    Or

    b) Use the Search option to find the user (Note:To list all the users, just click the Search button without typing anything in the Search box)

       5. Now, use the check box to select the desired list of user (s) and then click Apply

    The change summary and the status of the modification can be verified.strong

    Note:

    1. Changing the Name format will change the name of the existing user account with all the other properties unaltered.

    2. Changing the Logon name and SAM account name may cause duplication, if one by the same name exists.

    Delete users

    It is always important to keep the Active Directory clean. As part of the cleanup process, administrators flush out the Inactive/disabled user accounts from the Active Directory using this feature.

    How to delete bulk user objects using ADManager Plus?

    To delete user objects, you have to the list the users in the domain by either using a CSV file or using the Search option. Then, select the desired user (s) to be deleted and finally hit the apply button.

    Steps:

    1. Select the AD Mgmt tab.

    2. Click the Delete Users link available under General Attributes. This opens the Delete User Accounts from Active Directory dialog.

    3. Click the Configure Delete Policy link to specify other user related folders ( Roaming profiles,Remote Home folders, etc) that need to be removed during user deletion.

    1. From the drop down menu, select the domain in which the users are located.( Note: If you know the OU in which the users are located, click the add OUs button and select the appropriate OU)

    2. You can now use one of the following options to list the computers that have to be deleted.

    a) Import the CSV file (sample CSV file) which contains the list of computers that have to be deleted. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

    Or

    b) Use the Search option to search for the users (Note: To list all the users in the domain, hit the search button without entering anything in the Search box.

    • Now, use the check box to select the desired list of user objects to be deleted.
    • Click on Apply to confirm the deletion.

    The change summary and the status of the modification can be verified.

    Note:

    1. Changing the Name format will change the name of the existing user account with all the other properties unaltered.

    2. Changing the Logon name and SAM account name may cause duplication, if one by the same name exists.

    3. Shared home folder/profile will not be deleted upon deletion of users.

    Enable/Disable Active Directory Users

    This feature makes it possible to enable or disable multiple user accounts and also specify the account expiry date, at one go.

    Procedure:

    In the enable/disable users feataure, select the action (enable/disable) and also the appropriate account expiry date. Select the desired domain/the OUs. Locate the users to be enabled/disabled using the search option or specify the user accounts via a CSV file.

    Steps:  

    1. Click the Management tab.

    2. In User Management, go to Bulk User Modification --> Enable/Disable Lync Users

    3. In the 'Modify Account Attributes of Users' page,
      • Select the required option in Enable/Disable option, as per your requirement.
      • Use the Account Expires option to specify an expiry date for the account, if needed.
    4. Select the domain in which the desired user accounts are located; you can also specify the appropriate OUs using Add OUs option.

    5. Specify the users for whom this task has to be performed using:

      • A CSV file, which has the users list, using CSV Import option
      • The search option to locate the desired users
    6. Confirm the users for whom this change has to be done by selecting the required users from the list of users fetched from the CSV file or by the search feature.

    7. Click on Apply to complete this operation.

    Modify Skype for Business / Lync Policies

    This feature helps you to modify the Skype for Business / Lync Server policies applied to Active Directory users for whom the Skype/Lync Server communication option has been enabled.

    Procedure:

    Configure the required Skype for Business / Lync Server policies like conferencing policy, telephony policy and archiving policy in your Lync Server. Then, using the modify Skype (Lync) policies feature, select the required policies and associate them to the desired users in your Active Directory.

    Steps:

    1. Click on Management tab.

    2. In User Management, go to Bulk User Modification --> Modify Skype (Lync) Policies

    3. In the Modify Skype (Lync) Policies page, select the policies (Conferencing policy, Telephony policy and Archiving policy), select the desired policy from the list of policies available under each category (Conferencing policy, Telephony policy and Archiving policy).

    4. Select the domain in which the desired user accounts are located; you can also specify the appropriate OUs using Add OUs option.

    5. Specify the users for whom this task has to be performed using any of these options:

      • Importing the CSV file with the users list via CSV Import option
      • The search option to locate the desired users
    6. Confirm the users for whom this change has to be done by selecting the required users from the list of users fetched from the CSV file or by the search feature.

    7. Click Apply to apply the new policies to all the selected users.

    Restore Deleted Users

    Accidental deletion of users is a problem every Active Directory administrator has to deal with every now and then. Restoring the deleted user, along with all the attributes, is a painstaking activity, with the administrators having to depend on scripts, more often than not. And when more than one user is deleted, the challenge multiplies and restoring all the deleted users becomes quite a cumbersome process. And in large networks, this is a trouble that always keeps the administrators on their toes. ADManager Plus s Restore Deleted Users features makes the task of restoring deleted users, single or in bulk, an easy and simple one, which can be accomplished using just mouse clicks.

    Procedure:

    Go to the Restore Users from Recycle Bin page, select the domain in which you would like to restore the deleted users. Specify the user accounts that you would like to restore and click on the apply button to restore the users.

    Steps:

    1. 1. Click on Management tab.

    2. 2. Click on User ManagementBulk User ModificationRestore Deleted Users.
    3. 3. In the Restore Users from Recycle Bin page, select the domain.
    4. 4. Specify the users accounts to be restored in any of the following ways:
      -Locate the user accounts using the search option
      - Specify the list of user accounts in a .CSV file which can be imported using the CSV Import option.
    5. 5. Click on apply to restore the deleted users.

    The deleted user accounts will be restored with all the attributes intact only in case of Active Directory 2008 R2 with the Recycle Bin feature enabled. In all other earlier versions, the user accounts will be restored only with the mandatory attributes and not all the attributes.

     

    For details on the user attributes, refer to the Microsoft Documentation.

    Modifying User Profiles

    You can modify the home folder and the profile path for the users logging from terminal services using ADManager Plus

    Procedure:

    First, provide suitable values for terminal service home folder and profile path attributes. Then, apply the same to desired list of users.

    Steps:

    1. Select the Management tab.

    2. Click the Profiles link available under Terminal Services. This opens the Modify Terminal Service Profile Attributes of the users dialog.

    3. Specify the home folder and/or the profile path for the users.

    4. You can now use one of the following options to list the contacts whose group attributes have to be modified

    a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

     

    Or

     

    b) Use the Search option to find the users (Note: To list all the users, just click the Search button without typing anything in the Search box)

       5. Now, use the check box to select the desired list of user (s) and then click Apply

    The change summary and the status of the modification can be verified.

    Note:

    1. Profile Path need not be specified, if it is a local path.

    2. When you specify the home folder/Profile Path in a network share, it is advisable to provide permissions to the specified users to avoid any misuse/discrepancies.

    Modifying Environmental Variables

    You can modify the program to be started and the start folder when the user logs on to terminal services.

    Procedure:

    First, configure the terminal service environment attributes and then apply the same to desired list of users.

    Steps:

    1. Select the Management tab.

    2. Click the Environment link available under Terminal Services. This opens the Modify Terminal Service Environment of the users dialog.

    3. Specify the program to be started and the start folder.

    4. You can select the Client devices attributes namely client drives at logon, Connect client printers at logon, Default to main client printer as yes/no.

    5. Select the domain and search the users. You can limit your search to specific OU's of the domain by clicking the Select OU link and selecting the OU's.

    6. From the listed users, select the users for changing the terminal service environment and click Apply.

    The change summary and the status of the modification can be verified.

    Modifying Terminal Services Attributes

    Terminal Services allow users to log into computers remotely. With this feature from ADManager Plus, administrators can control the manner in which users log into remote computers, set the profile path, home folder for users when connected remotely. Also, you can configure the active session duration, idle session limit, and also how you can interact with the user's session.

    All the below functions support CSV file import: Sample CSV file.

    1. Modifying User Attributes

    2. Modifying Environmental Variables

    3. Modifying Session Attributes

    4. Modifying Dial-in or VPN Properties

    5. Modifying Remote Control Attributes

    6. Move / Delete TS Home Folders and TS Profile Paths

    For details on the user attributes, refer to the Microsoft Documentation.

    Dial-in or VPN properties

    ADManager Plus allows to modify the Dial-in or VPN properties for users. Follow the steps below to perform the task:

    1. Click the AD Mgmt tab and select User Management option from the left pane.

    2. Select the Dial-in or VPN Properties link under Bulk User Modification.

    3. Select the required Remote Access Permission.

    4. You can select either Allow, Deny or Apply Remote Access Policy option.

    5. Select the domain and do a name search to specify the users list or simply perform a CSV import of users.

    Dial-in or VPN properties

    ADManager Plus allows to modify the Dial-in or VPN properties for users. Follow the steps below to perform the task:

    1. Click the AD Mgmt tab and select User Management option from the left pane.

    2. Select the Dial-in or VPN Properties link under Bulk User Modification.

    3. Select the required Remote Access Permission.

    4. You can select either Allow, Deny or Apply Remote Access Policy option.

    5. Select the domain and do a name search to specify the users list or simply perform a CSV import of users.

    Modifying Remote Control Attributes

    You can enable or disable remote control and various other options for users logging from terminal services using this feature from ADManager Plus.

    Procedure:

    First, configure the required terminal remote control attributes and then apply the same to desired list of users.

    Steps:

    1. Select the Management tab.

    2. Click the Remote Control link available under Terminal Services. This opens the Modify Terminal Remote Control Attributes of the users dialog.

    3. Specify the remote control attributes as required.

    4. Select the domain and search the users. You can limit your search to specific OU's of the domain by clicking the Select OU link and selecting the OU's.

    5. From the listed users, select the users for changing the terminal service remote control attributes and click Apply.

    The change summary and the status of the modification can be verified.

    Move / Delete Terminal Services Home Folders / Profile Paths

    This feature lets you perform the following actions for users individually as well as in bulk:

    1. move TS home folders to a desired location.

    2. delete TS home folders and clear their associated AD attributes.

    3. move TS profile paths to a desired location.

    4. delete TS profile paths and clear their associated AD attributes.

    You can also specify whether or not you want to retain a copy of the TS (Terminal Services) home folder or TS profile folder in its original location.

    Steps:

    1. Click the AD Mgmt tab.

    2. Select the User Management link, located in the left pane.

    3. Click the Move/Delete TS Home Folders link available under Bulk User Modification.

    4. a. If you want to move TS home folders to another location: 

      -Click the Move TS Home Folder option. 
      -Select  Move TS Home Folder To.
      -Specify the location where you want to move the TS home folders in the field provided. Only Universal Naming Convention path is supported. The format should be: \\file-servername\shared directory name
      -Select  Retain a copy in the original location, if you want a copy of the TS home folder to exist in its original location as well.

      b. If you want to delete TS home folders:

      -Click the Delete TS Home Folder option. 
      -Select  Delete TS Remote Home Folders.

      c. If you want to move TS profile paths to another location: 

      -Click the Move TS Home Folder option. 
      -Select  Move TS Profile Path To.
      -Specify the location where you want to move the TS profile paths in the field provided. Only Universal Naming Convention path is supported. The format should be: \\file-servername\shared directory name
      -Select  Retain a copy in the original location, if you want a copy of the TS profile folder to exist in its original location as well.

      d. If you want to delete TS profile paths:

      -Click the Delete TS Home Folder option. 
      -Select  Delete TS Roaming Profiles.

    5. Select the domain (and specific OUs, if you do not wish to perform this action for all users in the domain) to locate the users whose TS home folder/TS profile path attributes have to be modified.

    6. You can use either of the following options to specify the users:

      a. Import a CSV file containing users' details.

      -Click CSV Import.
      -Choose the appropriate CSV file from your computer.
      -Click  Go.

      b. The built-in Search option.
      -Enter the names and click Search. To list all the users available in the selected domain (or OU), simply click Search without typing anything in the field.
      -Select the desired user(s) from the list and click Apply.