Active Directory Bulk Users Modification

Modifying Security Attributes

This feature enables you to unlock the accounts that were locked due to bad log on or due to account settings.

Procedure:

First, either use the search option or import a CSV file to list the user accounts that need to be unlocked and then click apply.

Steps

1. Click AD Mgmt → User Management → Unlock Users
2. From the drop down menu, select the domain in which the computers are located (Note: If you know the OU in which the computers are located, click the add OUs button and select the appropriate OU)
3. You can now use one of the following options to list the users that have to be moved to a different OU.

a) Import the CSV file (sample CSV file) which contains the list of users. On importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

Or

b) Use the Search option to find the computers (Note: To list all the users just click the Search button without typing anything in the Search Box)

4. Now, use the check box to select the desired list of users and then click Apply.

The change summary and the status of the modification can be verified.

Roll over the mouse over the icon to see the attributes in the windows native UI.

Enable / Disable users:

It is mandatory for administrators to keep the Active directory clean .In line with the same, administrators prefer to disable computers that have been inactive for a long time, and then enable them when required. This looks easy if it has to be carried out for just a single computer, but becomes tedious if an organization has a large number of computers. This is when administrators can make use of this feature to Enable/Disable bulk computer accounts.

How to Enable/Disable bulk user accounts using ADManager Plus?

Steps :

1. Look out for the options Enable / Disable / More actions in the user reports generated.
2. Check in the boxes adjacent to the desired users to select them.
3. Now you can Enable / Disable or perform More actions by clicking on the appropriate tab.

Modifying Organization Attributes

You can change the users' address and organization details, such as Title, Department, Manager.

Procedure:

First, enter values for organizational attributes of the users based on your need, then import the list of users on which the values must be applied and finally click apply.

Steps:

1. Select the AD Mgmt tab.
2. Click the Organization Attributes link available under General Attributes. This opens the Modify Address/Organization Attributes of the Users dialog.
3. Select the option to change and specify the value in the text field.

4. You can now use one of the following options to list the contacts whose group attributes have to be modified:

a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

Or

b) Use the Search option to find the user (Note: To list all the users, just click the Search button without typing anything in the Search box)

5. Now, use the check box to select the desired list of user (s) and then click Apply

The change summary and the status of the modification can be verified.

Roll over the mouse over the icon to see the attributes in the windows native UI.

Modifying Profile Attributes

The user profiles, such as Profile Path, Logon Script Path, and Users' home folder can be modified easily this feature of ADManager Plus.

Procedure:

First, enter the values for Profile Path,Logon script and Home folder for the users based on your requirement and then apply the same to desired list of users.

Steps:

1. Select the AD Mgmt tab.
2. Click the Profile Attributes link available under General Attributes. This opens the Modify Profile Attributes of the Users dialog.
3. This feature allows You to modify log on script, profile path and home folder of users.Select the option to change and specify the value in the text field.

4. Select the domain and search the users. You can limit your search to specific OU's of the domain by clicking the Select OU link and selecting the OU's.
5. You can import the list of users to be modified from CSV format or select the user from 'show All Users' list or Type a user name.
6. From the listed users, select the users for changing the profile attributes and click Apply.

The change summary and the status of the modification can be verified.

Roll over the mouse over the icon to see the attributes in the windows native UI.

Modifying Contact Attributes

Contact details of users are important to ensure prompt communication with the users. Hence, it is necessary to keep the contact details updated. With ADManager Plus, the details of users such as their telephone number, email, phone, IP phone and so on can be modified easily.

Procedure:

You have to first set the values for the attributes of the users based on your needs. Then, import the list of contacts to which the values must be set and finally click Apply.

Steps:

1. Select the AD Mgmt tab.
2. Click the Contact Attributes link available under General Attributes. This opens the Modify Contact Attributes of the Users dialog.
3. Enter values for attributes of the contacts based on your requirement
4. From the drop down menu, select the domain in which the user (s) are located (Note: If you know the OU in which the users are located, click the add OUs button and select the appropriate OU)
5. You can now use one of the following options to list the contacts whose group attributes have to be modified:

   a) You can import the CSV file (sample CSV file) which contains the list of users After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

   Or

   b) Use the Search option to find the users (Note: To list all the contacts, just click the Search button without typing anything in the Search box)

6. Now, use the check box to select the desired list of user (s) and then click Apply

The change summary and the status of the modification can be verified.

Roll over the mouse over the icon to see the attributes in the windows native UI.

Modifying Group Attributes

You can add users to specific groups, remove from specific groups, and can set the primary group for users from here. To modify the Windows user group attributes,

1. Select the AD Mgmt tab → Group Attributes

a) To add user (s) to a group:

Click the + button ( which is present beside "Add to Group" )

Select the group to which you to add the user (s)

Click Ok

b) To remove user (s) from a group

Click the + button ( which is present beside " Remove from Group")

Select the group from which you want to remove the user (s)

Click Ok

To remove users from all the groups that they are currently members of, select the 'Clear all Group Memberships' option.

c) To set the primary group for user (s)

Click the + button ( which is present beside "Set the primary group")

Select the Group which you wish to be set as the primary group for the user (s)

Click Ok

2. From the drop down menu, select the domain in which the user (s) are located (Note: If you know the OU in which the computers are located, click the "add OUs" button and select the appropriate OU)
3. You can now use one of the following options to list the users whose group attributes have to be modified:

   a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

   b) Use the Search option to find the users (Note: To list all the users, just click the Search button without typing anything in the Search box)

4. Now, use the check box to select the desired list of user (s) and then click Apply

The change summary and the status of the modification can be verified.

Roll over the mouse over the icon to see the attributes in the windows native UI.

Enable/Disable Active Directory Users

This feature makes it possible to enable or disable multiple user accounts and also specify the account expiry date, at one go.

Procedure:

In the enable/disable users feataure, select the action (enable/disable) and also the appropriate account expiry date. Select the desired domain/the OUs. Locate the users to be enabled/disabled using the search option or specify the user accounts via a CSV file.

Steps:  

1. Click the Management tab.
2. In User Management, go to Bulk User Modification → Enable/Disable users
3. In the 'Modify Account Attributes of Users' page,
   • Select the required option in Enable/Disable option, as per your requirement.
   • Use the Account Expires option to specify an expiry date for the account, if needed.
4. Select the domain in which the desired user accounts are located; you can also specify the appropriate OUs using Add OUs option
5. Specify the users for whom this task has to be performed using:
   • A CSV file, which has the users list, using CSV Import option
   • The search option to locate the desired users
6. Confirm the users for whom this change has to be done by selecting the required users from the list of users fetched from the CSV file or by the search feature.
7. Click on Apply to complete this operation.

Move Users to a Different Container

Using this feature, administrators can move bulk computer objects between Organizational Units depending on the needs of the organization.

How to move User accounts between OUs?

First, select the OU to which you want to move the users. Then, select the list of users that need to be moved by either importing a CSV file or by using the search option, and finally click on apply.

Steps

1. Click AD Mgmt tab - -> User Management - ->Move Users
2. Click the + icon and select the container to which you want to move the users
3. From the drop down menu, select the domain in which the users ( that need to be moved) are located (Note: If you know the OU in which the users are located, click the add OUs button and select the appropriate OU)
4. You can now use one of the following options to list the users that have to be moved to a different OU.

a)You can import the CSV file (sample CSV file) which contains the list of users. On importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

a)Use the Search option to find the users (Note: To list all the users just click the Search button without typing anything in the Search Box)

Or

5. Now, use the check box to select the desired list of users and then click Apply.

The change summary and the status of the modification can be verified.

Configure Logon hours

Using the configure logon hours feature, you can control when users can logon to the network.

• Regulate user activity
• Block out a malicious user and
• Restrict users from accessing the network after normal working hours

This feature lets you grant or restrict logon privileges for multiple users in just a few steps.

Procedure:

Specify the time/hours during which you wish to allow/restrict access to users, select the appropriate domain, specify the users to whom you wish to apply this logon hours permission and apply the changes.

Steps:

1. Click on "AD Mgmt" tab --> User Management'.
2. Click on Logon Hours.
3. To set the permitted or restricted logon hours for a user/ set of users
   • Click 'Select hours'.
   • Enter the logon time frame in the 'from' and 'to' field.
   • Check specific days or all days of the week to apply the chosen logon timings.
   • Click 'Allow' to grant users permission to logon to the network in the chosen time frame.
   • Click 'Deny' to restrict users from logging on to the network in the chosen time frame.
   Note: Alternatively you can also set logon hours by,
   1. Selecting each hour manually from the grid.
   2. Clicking on the 'Allowed' option to provide round the clock logon privilege from Sunday through Saturday. To block out a user on all the days of the week simply click 'Deny'
4. Once you have selected the logon hours,
• Pick a domain from the drop down menu.
• Choose the OUs for selected domains.
• Click 'Import CSV' to search for a user by feeding a CSV file. Choose a file to import and click 'Go'
• You can search for users by manually entering multiple user names separated by a comma.

5. To view the list of all users in the selected domain and OU, leave the search field empty and hit the 'Search' button.

• From the displayed list of users pick specific users and click on 'Apply' to apply the configured logon hours.
• The results can be exported in HTML, CSV, PDF or XLS format.

Manage Users' Photos

This feature allows you to manage the photos of the users in your Active Directory. Using this feature, you can

• Upload/Modify the photo for a single user.
• Upload/Modify the photos users in bulk.
• Manage users' photos in AD and Exchange through user creation and modification templates
• Delete user photo

This page provides the steps needed to use the various options in the manage user photos feature, and also the frequently asked questions (FAQs) specific to the photo management feature.

Upload/Modify the photo of a single user

To upload a photo for a user or to modify (replace/crop) the existing photo of a user, follow these steps:

• Click the Management tab.
• In User Management, click the Manage User Photos link located under Bulk User Modification.
• In the Modify Users' Profile Photos page, select the domain in which the user whose photo has to be modified is located.

  Click the Add OUs link, and select the desired OUs if you know the exact location of the desired user.

• Locate the desired user using the search option located on the left extreme.

  Note:

  - While using the searching option to locate the desired user, you can specify the attribute (thumbnailPhoto / thumbnailLogo / jpegPhoto / Photo / exchangePhoto) based on which you wish to locate the user.

  - By default, thumbnailPhoto attribute will be used; to change, click the thumbnailPhoto link located just below the locate user option and select the desired attribute.

• All the matching users will be displayed, along with their photo (if it is available). Click the desired user account.
• The select photo window will pop up. This window will have the

  - Select photo option if the user does not have any photo.

  - Change photo, and Crop options if the selected user already has a photo.

• To upload a photo for a user for the first time, click select photo option, select the desired photo and save.
• To modify/change the existing photo of an user, click the

  - Click the change photo option, select the desired user, and save.

  - Click the crop option, make the selection and save.

Upload/Modify the photos of users in bulk

This feature gives you the flexibility to:

• - Import all the photos from a folder and upload them to the corresponding users
• - Import only specific photos and upload them to the corresponding users

Steps to upload/modify user photos:

• Click the Management tab.
• In User Management, click the Manage User Photos link located under Bulk User Modification.
• In the Modify Users Profile Photos page, select the domain in which the users whose photos have to be modified are located. All the users in the selected location will be listed along with their photos, if they have one.
  Click the Add OUs link, and select the desired OUs if you know the exact location of the users.
• Click the Import Photos button located at the center of the window, just above the users list.
• In the Import Photos window that pops up, specify the path of the shared folder where the users' photos are located. Alternatively, instead of importing all the photos from the folder, if you wish to import only specific photos from the folder, click the 'Select Photos' option, and then the 'Select Files' button.
• Specify the naming pattern/attribute based on which the photos in the selected folder must be matched with their corresponding users in AD.
  By default, the displayName will be used; if you wish to use a different one, click the Edit icon located beside the file name pattern field and select the desired attribute/pattern.
• Click Import to fetch all the photos from the specified location. The imported photos can be resized based on the requirements before uploading.
• From the users displayed, select the ones for whom you wish to upload/modify the photos and click Update.

Delete user photos

This option allows you to remove the photos of users in your AD.

Steps:

1. Click the AD Mgmt tab.
2. In User Management, click the Manage User Photos link located under Bulk User Modification.
3. In the Modify Users Profile Photos page, select the domain in which the users whose photos you wish to delete are located. All the users in the selected location will be listed along with their photos, if they have one.
   Click the Add OUs link, and select the desired OUs if you know the exact location of the desired users.
4. From the list of users, click the user whose photo you wish to delete.
5. In the select photo window that pops up, click the remove button, to delete the photo.

FAQs related to the Photo Management feature

1. How can I modify the photo for only one (single) user?

Locate the desired user using the search option provided on the left extreme of the manage user photos page; point and click the mouse over the desired user, select the relevant photo using the option provided in the window that pops up, and save.

2. How can I apply a photo for an entire department?

- Name the photo to be updated with exactly the same name of the department (for example: sales.jpg).
- Choose the format value to be used (for matching the photo to the object) as %department%, Import the photo.
- Review, select all the users and click Apply.

3. The user I want to modify is not displayed when I search using the locate user option.

This issue could be due to any of these reasons:

- If the user account is a new one, click the refresh icon placed at the top left corner of the pane where the users are displayed, and search again.

- If you are trying to locate the user using an attribute other than the displayName or sAMAccountName, chances are the value might have changed. Run the All Users report, locate the user, confirm the value of the attribute that you are using, and try again.

- Sometimes insufficient permissions could also cause this issue; check if you have permission to view the users in the particular OU where the user is located.

4. I am importing photos for bulk modification of users photos, but a particular user is not in the list displayed. What should I do?

This issue could be due to any of these reasons:

- Ensure that the size of the photo for the particular user does not exceed the the maximum limit. The maximum allowed size for thumbnailPhoto is 100KB, for thumbnailLogo it is 32KB, and for jpegPhoto and photo, it is 10MB.

- If you are using an attribute other than the displayName and sAMAccountName as the file name format for importing the photos, the value for the particular attribute might have changed recently. Please run All Users report, confirm the value of the attribute and try again.

- If the attribute used while importing the photos is a custom attribute, please ensure that it is configured in the Admin tab of ADManager Plus and has user reports selected in the associated reports.

5. I have tried all the solutions mentioned in the FAQ but the issue still persists.

We suggest that you contact our support team at support@admanagerplus.com, and we will assist you in resolving the issue.

Modify Logon Workstation

You can choose the list of workstations to which the users can/cannot log in.

Procedure:

First, set the workstation on to which the users can/cannot log in. Then, apply the same to the desired list of users.

1. Select the AD Mgmt tab.
2. Click the Modify Logon Workstation link available under General Attributes. This opens the Modify user logon workstations dialog.
3. Select the option 'Allow all computers' to allow user to logon to all computers.
4. Select the option 'Allow selected computers' to restrict users to selected computers.
5. You can manually add or remove computers or click on the icon to select.
6. Select the domain and search the users. You can limit your search to specific OU's of the domain by clicking the Select OU link and selecting the OU's.

1. You can now use one of the following options to list the contacts whose group attributes have to be modified:

a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

Or

b) Use the Search option to find the user (Note: To list all the users, just click the Search button without typing anything in the Search box)

8. Now, use the check box to select the desired list of user (s) and then click Apply

The change summary and the status of the modification can be verified.

Modifying Inheritable Permissions

You can modify the inheritable permissions of objects and users i.e. you can allow or restrict a object from gaining permissions from its parent object.

Procedure:

First, use the check box to decide whether or not the inheritable permissions will propagate from the parent object. Then apply the same to the desired list of users.

Steps:

1. Select the AD Mgmt tab.
2. Click the Modify Inheritable permissions link available under General Attributes. This opens the Modify user Inheritable Permissions dialog.
3. Use the checkbox to 'allow' or 'restrict' the inheritance from their parent object.
4. You can now use one of the following options to list the contacts whose group attributes have to be modified:

a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

Or

b) Use the Search option to find the user (Note: To list all the users, just click the Search button without typing anything in the Search box)

5. Now, use the check box to select the desired list of user (s) and then click Apply

The change summary and the status of the modification can be verified.

Roll over the mouse over the icon to see the attributes in the windows native UI.

Move / Delete Home Folders and Profile Paths

This feature lets you perform the following actions for users individually as well as in bulk:

1. move home folders to a desired location.
2. delete home folders and clear their associated AD attributes.
3. move profile paths to a desired location.
4. delete profile paths and clear their associated AD attributes.

You can also specify whether or not you want to retain a copy of the home folder or profile folder in its original location.

Steps:

1. Click the AD Mgmt tab.
2. Select the User Management link, located in the left pane.
3. Click the Move/Delete Home Folders link available under Bulk User Modification.

4. a. If you want to move home folders to another location: 

   -Click the Move Home Folder option. 
   -Select  Move Home Folder To.
   -Specify the location where you want to move the home folders in the field provided. Only Universal Naming Convention path is supported. The format should be: \\file-servername\shared directory name
   -Select  Retain a copy in the original location, if you want a copy of the home folder to exist in its original location as well.

   b. If you want to delete home folders:

   -Click the Delete Home Folder option. 
   -Select  Delete Remote Home Folders.

   c. If you want to move profile paths to another location: 

   -Click the Move Home Folder option. 
   -Select  Move Profile Path To.
   -Specify the location where you want to move the profile paths in the field provided. Only Universal Naming Convention path is supported. The format should be: \\file-servername\shared directory name
   -Select  Retain a copy in the original location, if you want a copy of the profile folder to exist in its original location as well.

   d. If you want to delete profile paths:

   -Click the Delete Home Folder option. 
   -Select  Delete Roaming Profiles.

5. Select the domain (and specific OUs, if you do not wish to perform this action for all users in the domain) to locate the users whose home folder/profile path attributes have to be modified.

6. You can use either of the following options to specify the users:

   a. Import a CSV file containing users' details.

   -Click CSV Import.
   -Choose the appropriate CSV file from your computer.
   -Click  Go.

   b. The built-in Search option.
   -Enter the names and click Search. To list all the users available in the selected domain (or OU), simply click Search without typing anything in the field.
   -Select the desired user(s) from the list and click Apply.

Modify Custom Attributes

ADManager Plus allows you to add/ modify custom attributes that are present in Active Directory schema but not in ADManager Plus. You can use these attributes based on your requirement during user creation and modification.

Procedure:

First, enter the LDAP name, value and Data type of the custom attribute to be modified and then apply the same to desired list of users.

Steps:

1. Select the AD Mgmt tab.
2. Click the custom Attributes link available under General Attributes. This opens the Modify custom Attributes of the Users dialog.
3. Enter the LDAP name and value,then select the data type from the given options.

4. You can now use one of the following options to list the contacts whose group attributes have to be modified:

a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

Or

b) Use the Search option to find the user (Note:To list all the users, just click the Search button without typing anything in the Search box)

5. Now, use the check box to select the desired list of user (s) and then click Apply

The change summary and the status of the modification can be verified.strong

Delete users

It is always important to keep the Active Directory clean. As part of the cleanup process, administrators flush out the Inactive/disabled user accounts from the Active Directory using this feature.

How to delete bulk user objects using ADManager Plus?

To delete user objects, you have to the list the users in the domain by either using a CSV file or using the Search option. Then, select the desired user (s) to be deleted and finally hit the apply button.

Steps:

1. Select the AD Mgmt tab.
2. Click the Delete Users link available under General Attributes. This opens the Delete User Accounts from Active Directory dialog.
3. Click the Configure Delete Policy link to specify other user related folders ( Roaming profiles,Remote Home folders, etc) that need to be removed during user deletion.

1. From the drop down menu, select the domain in which the users are located.( Note: If you know the OU in which the users are located, click the add OUs button and select the appropriate OU)
2. You can now use one of the following options to list the computers that have to be deleted.

a) Import the CSV file (sample CSV file) which contains the list of computers that have to be deleted. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

Or

b) Use the Search option to search for the users (Note: To list all the users in the domain, hit the search button without entering anything in the Search box.

• Now, use the check box to select the desired list of user objects to be deleted.
• Click on Apply to confirm the deletion.

The change summary and the status of the modification can be verified.

Enable/Disable Active Directory Users

This feature makes it possible to enable or disable multiple user accounts and also specify the account expiry date, at one go.

Procedure:

In the enable/disable users feataure, select the action (enable/disable) and also the appropriate account expiry date. Select the desired domain/the OUs. Locate the users to be enabled/disabled using the search option or specify the user accounts via a CSV file.

Steps:  

1. Click the Management tab.
2. In User Management, go to Bulk User Modification →Enable/Disable users
3. In the 'Modify Account Attributes of Users' page,
   • Select the required option in Enable/Disable option, as per your requirement.
   • Use the Account Expires option to specify an expiry date for the account, if needed.
4. Select the domain in which the desired user accounts are located; you can also specify the appropriate OUs using Add OUs option.
5. Specify the users for whom this task has to be performed using:
• A CSV file, which has the users list, using CSV Import option
• The search option to locate the desired users
6. Confirm the users for whom this change has to be done by selecting the required users from the list of users fetched from the CSV file or by the search feature.
7. Click on Apply to complete this operation.

Modify Skype for Business / Lync Policies

This feature helps you to modify the Skype for Business / Lync Server policies applied to Active Directory users for whom the Skype/Lync Server communication option has been enabled.

Procedure:

Configure the required Skype for Business / Lync Server policies like conferencing policy, telephony policy and archiving policy in your Lync Server. Then, using the modify Skype (Lync) policies feature, select the required policies and associate them to the desired users in your Active Directory.

Steps:

1. Click on Management tab.
2. In User Management, go to Bulk User Modification --> Modify Skype (Lync) Policies
3. In the Modify Skype (Lync) Policies page, select the policies (Conferencing policy, Telephony policy and Archiving policy), select the desired policy from the list of policies available under each category (Conferencing policy, Telephony policy and Archiving policy).
4. Select the domain in which the desired user accounts are located; you can also specify the appropriate OUs using Add OUs option.
5. Specify the users for whom this task has to be performed using any of these options:
   • Importing the CSV file with the users list via CSV Import option
   • The search option to locate the desired users
6. Confirm the users for whom this change has to be done by selecting the required users from the list of users fetched from the CSV file or by the search feature.
7. Click Apply to apply the new policies to all the selected users.