User Creation Templates - Advanced Options in Account Tab

ADManager Plus's user creation templates make it possible to set permissions for users' profile path and home folders and even allow you to customize the basic UAC options. You can configure all these settings in the Account tab of the user creation templates as mentioned below.

Set Profile Path Permissions

Profile path specifies a Uniform Naming Convention (UNC) name, such as \\Server\Prof$\%username%, to be the network folder where the user's roaming profile is stored. This way, user's roaming profile is downloaded to whichever  workstation he logs onto and it is uploaded back to the server when he logs off. Use dollar sign ($) only if the folder in which the user profiles will be created is an invisible one.

Steps to configure Profile Path:

1. 'Profile path' attribute can be found in the 'Account' tab of user creation templates.

2. While specifying profile path click on 'Permissions' adjacent to it, this will open a window for profile path settings.

3. Select the 'Create Profile Path Directory before user's first login' option.

4. You can add the required permissions using 'Add More Permissions' link.

5. This leads you to set of options where in you can allow a selected user or group or computer, to have permissions like full control, read attributes, delete etc, over folder and its descendants.

6. Click on Add.

7. If needed, select the 'Inherit from parent the permission entries that apply to child objects' option.

Note: You can also create a Windows Vista profile for your users by either: Selecting the 'Create Vista Profile Path Directory also' option located in the 'Profile Path Settings' window that pops up when you click on the 'Permissions' link beside the 'Profile Path' field, or Suffixing the profile path with '.V2'. That is, if the normal profile path looks like 'C: \Documents and settings\Jim', the profile path for Vista profile should be like 'C: \Documents and settings\Jim.V2'. V5 and V6 profiles are supported as well.

Back to User Template Creation

Set Permissions For Home Folders

Home folders and My Documents make it easier for an administrator to back up user files and manage user accounts by collecting the user's files in one location. If you assign a home folder to a user, you can store the user's data in a central location on a server, and make backup and recovery of data easier and more reliable.  ADManager Plus has provided some special features that helps in quickly configuring these properties for the user. 

Configuring the property "Home Folder":

1. "Home folder" attribute can be found in the "Account Details" tab of "Create Template" wizard.
2. Click "Connect" and specify a  drive letter.
3. In the box nearby, type a path. This path can be any of the following types:
1. Network path, for example: \\server\users\tester
2. You can substitute username for the last subfolder in the path, for example: \\server\users\%username%
3. Where server is the name of the file server housing the home folders, and where users is the shared folder.<>
4. The "%username%" will automatically get expanded to the user's name.

You can also create a shared folder as users' home directory using ADManager Plus by selecting the "Create a New Share" option located below the "home folder" field. To make this new share as the users' home directory use this format: \\server\%username% in the home directory path. Use the permissions link to set the desired permissions for this folder.

Back to User Template Creation

Customize 'Basic UAC Options'

In the Account Properties field group, user must change password at next logon, user cannot change password, password never expires and account is disabled grouped together as Basic UAC Options. You can customize this grouping to display only the required options. Mentioned below are the steps to customize this grouping.

• Select the appropriate user creation template
• Click on Enable Drag-n-Drop button.
• Click on Account tab.
• In the Account Properties field group, point your mouse over: user must change password at next logon, user cannot change password, password never expires or account is disabled attribute.
• Click on edit from the options listed when you point over the edit icon.
• In the Edit UAC Basic Account Options window that pops up,
• Point your mouse over each of the UAC option / attribute. If it is currently visible, you will see the hide link beside it and you will see a show link if it is currently hidden.
• As per your need, click on the hide or show link to make the hidden or visible.
• Click on Done to save the changes. Back to User Template Creation

Configuring 'logon hours' for users

You can specify the appropriate hours during which a user must be allowed access or restricted from accessing the domain using the logon hours option.

• Select the appropriate user creation template
• Click on Enable Drag-n-Drop button.
• Click on Account tab.
• Point the mouse over the 'Logon Hours' attribute.
• Click on edit from the options listed when you point over the edit icon.
• Click on 'Select hours'.
• Enter the logon time frame in the 'from' and 'to' field.
• Check specific days or all days of the week to apply the chosen logon timings.
• Click 'Allow' to grant users permission to logon to the network in the chosen time frame.
• Click 'Deny' to restrict users from logging on to the network in the chosen time frame.
• Use the 'Security' settings shown when you click on 'Options' to make the 'logon hours' a read-only attribute. Back to User Template Creation



Note: Alternatively you can also set logon hours by, Selecting each hour manually from the grid. Clicking on the 'Allowed' option to provide round the clock logon privilege from Sunday through Saturday. To block out a user on all the days of the week simply click 'Deny'