Active Directory Bulk Users Modification

Modifying Security Attributes

This feature enables you to unlock the accounts that were locked due to bad log on or due to account settings.

Procedure

First, either use the search option or import a CSV file to list the user accounts that need to be unlocked and then click apply.

Steps

1. Click AD Mgmt → User Management → Unlock Users
2. From the drop down menu, select the domain in which the computers are located (Note: If you know the OU in which the computers are located, click the add OUs button and select the appropriate OU)
3. You can now use one of the following options to list the users that have to be moved to a different OU.

a) Import the CSV file (sample CSV file) which contains the list of users. On importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

Or

b) Use the Search option to find the computers (Note: To list all the users just click the Search button without typing anything in the Search Box)

4. Now, use the check box to select the desired list of users and then click Apply.

The change summary and the status of the modification can be verified.

Roll over the mouse over the icon to see the attributes in the windows native UI.

Enable / Disable users:

It is mandatory for administrators to keep the Active directory clean .In line with the same, administrators prefer to disable computers that have been inactive for a long time, and then enable them when required. This looks easy if it has to be carried out for just a single computer, but becomes tedious if an organization has a large number of computers. This is when administrators can make use of this feature to Enable/Disable bulk computer accounts.

How to Enable/Disable bulk user accounts using ADManager Plus?

Steps

1. Look out for the options Enable / Disable / More actions in the user reports generated.
2. Check in the boxes adjacent to the desired users to select them.
3. Now you can Enable / Disable or perform More actions by clicking on the appropriate tab.

Modifying Organization Attributes

You can change the users' address and organization details, such as Title, Department, Manager.

Procedure

First, enter values for organizational attributes of the users based on your need, then import the list of users on which the values must be applied and finally click apply.

Steps

1. Select the AD Mgmt tab.
2. Click the Organization Attributes link available under General Attributes. This opens the Modify Address/Organization Attributes of the Users dialog.
3. Select the option to change and specify the value in the text field.

4. You can now use one of the following options to list the contacts whose group attributes have to be modified:

a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

Or

b) Use the Search option to find the user (Note To list all the users, just click the Search button without typing anything in the Search box)

5. Now, use the check box to select the desired list of user (s) and then click Apply

The change summary and the status of the modification can be verified.

Roll over the mouse over the icon to see the attributes in the windows native UI.

Modifying Profile Attributes

The user profiles, such as Profile Path, Logon Script Path, and Users' home folder can be modified easily this feature of ADManager Plus.

Procedure

First, enter the values for Profile Path,Logon script and Home folder for the users based on your requirement and then apply the same to desired list of users.

Steps

1. Select the AD Mgmt tab.
2. Click the Profile Attributes link available under General Attributes. This opens the Modify Profile Attributes of the Users dialog.
3. This feature allows You to modify log on script, profile path and home folder of users.Select the option to change and specify the value in the text field.

4. Select the domain and search the users. You can limit your search to specific OU's of the domain by clicking the Select OU link and selecting the OU's.
5. You can import the list of users to be modified from CSV format or select the user from 'show All Users' list or Type a user name.
6. From the listed users, select the users for changing the profile attributes and click Apply.

The change summary and the status of the modification can be verified.

Roll over the mouse over the icon to see the attributes in the windows native UI.

Modifying Contact Attributes

Contact details of users are important to ensure prompt communication with the users. Hence, it is necessary to keep the contact details updated. With ADManager Plus, the details of users such as their telephone number, email, phone, IP phone and so on can be modified easily.

Procedure

You have to first set the values for the attributes of the users based on your needs. Then, import the list of contacts to which the values must be set and finally click Apply.

Steps

1. Select the AD Mgmt tab.
2. Click the Contact Attributes link available under General Attributes. This opens the Modify Contact Attributes of the Users dialog.
3. Enter values for attributes of the contacts based on your requirement
4. From the drop down menu, select the domain in which the user (s) are located (Note If you know the OU in which the users are located, click the add OUs button and select the appropriate OU)
5. You can now use one of the following options to list the contacts whose group attributes have to be modified:

   a) You can import the CSV file (sample CSV file) which contains the list of users After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

   Or

   b) Use the Search option to find the users (Note To list all the contacts, just click the Search button without typing anything in the Search box)

6. Now, use the check box to select the desired list of user (s) and then click Apply

The change summary and the status of the modification can be verified.

Roll over the mouse over the icon to see the attributes in the windows native UI.

Modifying Group Attributes

You can add users to specific groups, remove from specific groups, and can set the primary group for users from here. To modify the Windows user group attributes,

1. Select the AD Mgmt tab → Group Attributes

a) To add user (s) to a group:

Click the + button ( which is present beside "Add to Group" )

Select the group to which you to add the user (s)

Click Ok

b) To remove user (s) from a group

Click the + button ( which is present beside " Remove from Group")

Select the group from which you want to remove the user (s)

Click Ok

To remove users from all the groups that they are currently members of, select the 'Clear all Group Memberships' option.

c) To set the primary group for user (s)

Click the + button ( which is present beside "Set the primary group")

Select the Group which you wish to be set as the primary group for the user (s)

Click Ok

2. From the drop down menu, select the domain in which the user (s) are located (Note: If you know the OU in which the computers are located, click the "add OUs" button and select the appropriate OU)
3. You can now use one of the following options to list the users whose group attributes have to be modified:

   a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

   b) Use the Search option to find the users (Note: To list all the users, just click the Search button without typing anything in the Search box)

4. Now, use the check box to select the desired list of user (s) and then click Apply

The change summary and the status of the modification can be verified.

Roll over the mouse over the icon to see the attributes in the windows native UI.

Enable/Disable Active Directory Users

This feature makes it possible to enable or disable multiple user accounts and also specify the account expiry date, at one go.

Procedure

In the enable/disable users feataure, select the action (enable/disable) and also the appropriate account expiry date. Select the desired domain/the OUs. Locate the users to be enabled/disabled using the search option or specify the user accounts via a CSV file.

Steps:

1. Click the Management tab.
2. In User Management, go to Bulk User Modification → Enable/Disable users
3. In the 'Modify Account Attributes of Users' page,
   • Select the required option in Enable/Disable option, as per your requirement.
   • Use the Account Expires option to specify an expiry date for the account, if needed.
4. Select the domain in which the desired user accounts are located; you can also specify the appropriate OUs using Add OUs option
5. Specify the users for whom this task has to be performed using:
   • A CSV file, which has the users list, using CSV Import option
   • The search option to locate the desired users
6. Confirm the users for whom this change has to be done by selecting the required users from the list of users fetched from the CSV file or by the search feature.
7. Click on Apply to complete this operation.

Move Users to a Different Container

Using this feature, administrators can move bulk computer objects between Organizational Units depending on the needs of the organization.

How to move User accounts between OUs?

First, select the OU to which you want to move the users. Then, select the list of users that need to be moved by either importing a CSV file or by using the search option, and finally click on apply.

Steps

1. Click AD Mgmt tab - -> User Management - ->Move Users
2. Click the + icon and select the container to which you want to move the users
3. From the drop down menu, select the domain in which the users ( that need to be moved) are located (Note If you know the OU in which the users are located, click the add OUs button and select the appropriate OU)
4. You can now use one of the following options to list the users that have to be moved to a different OU.

a)You can import the CSV file (sample CSV file) which contains the list of users. On importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

a)Use the Search option to find the users (Note To list all the users just click the Search button without typing anything in the Search Box)

Or

5. Now, use the check box to select the desired list of users and then click Apply.

The change summary and the status of the modification can be verified.

Configure Logon hours

Using the configure logon hours feature, you can control when users can logon to the network.

• Regulate user activity
• Block out a malicious user and
• Restrict users from accessing the network after normal working hours

This feature lets you grant or restrict logon privileges for multiple users in just a few steps.

Procedure

Specify the time/hours during which you wish to allow/restrict access to users, select the appropriate domain, specify the users to whom you wish to apply this logon hours permission and apply the changes.

Steps:

1. Click on "AD Mgmt" tab --> User Management'.
2. Click on Logon Hours.
3. To set the permitted or restricted logon hours for a user/ set of users
   • Click 'Select hours'.
   • Enter the logon time frame in the 'from' and 'to' field.
   • Check specific days or all days of the week to apply the chosen logon timings.
   • Click 'Allow' to grant users permission to logon to the network in the chosen time frame.
   • Click 'Deny' to restrict users from logging on to the network in the chosen time frame.
   Note Alternatively you can also set logon hours by,
   1. Selecting each hour manually from the grid.
   2. Clicking on the 'Allowed' option to provide round the clock logon privilege from Sunday through Saturday. To block out a user on all the days of the week simply click 'Deny'
4. Once you have selected the logon hours,
• Pick a domain from the drop down menu.
• Choose the OUs for selected domains.
• Click 'Import CSV' to search for a user by feeding a CSV file. Choose a file to import and click 'Go'
• You can search for users by manually entering multiple user names separated by a comma.

5. To view the list of all users in the selected domain and OU, leave the search field empty and hit the 'Search' button.

• From the displayed list of users pick specific users and click on 'Apply' to apply the configured logon hours.
• The results can be exported in HTML, CSV, PDF or XLS format.

Manage users' photos

ADManager Plus allows you to manage the photos of the users in your Active Directory (AD) and Exchange. Using this feature, you can:

• Modify or upload the photos for users in bulk
• Manage users' photos in AD and Exchange through user creation and modification templates
• Delete user photo

The steps given in this page will help you use the various options in the manage user photos feature and also the frequently asked questions (FAQs) specific to the photo management feature.

Modify or upload the photos of users in bulk

With this feature, you have the flexibility to:

• Import all the photos from a folder and upload them to the corresponding users
• Import specific user photos for a set of users

Steps to upload or modify user photos in bulk

1. Log in to ADManager Plus.
2. Click the Management tab.
3. Under User Management, click Manage User Photos located under Bulk User Modification.
4. Click the Import Photos button located at the center of the window, just above the users list.
5. You can upload user photos in two different ways.
• If you wish to upload all the images in a folder to the respective users, then in the Import Photos window that pops up, specify the path of the shared folder where the users' photos are located in the Import from a shared location tab and upload the photos in one go.
• Alternatively, instead of importing all the photos from the folder, if you wish to import only specific photos from the folder, click the Select Photos tab, and then the Browse button to upload the photos.
6. In the File name pattern to locate field, specify the file naming pattern or attribute based on which the photos in the selected folder must be matched with their corresponding users in AD.
Note By default, the displayName attribute will be used to match the photos. If you wish to use a different attribute or pattern, click the icon located beside the file name pattern field and select the desired attribute or pattern.
7. Click Import to fetch all the photos from the specified location. The imported photos can be resized based on the requirements before uploading.
8. From the users displayed, select the ones for whom you wish to upload or modify the photos and click Update.

Note

To upload or modify the photo of a single user from the Modify users' profile photos window itself,

• Select the domain from the Select Domain option.
• Click the tile of the user whose photo you want to modify or upload from the list of displayed users. You can also find the user using the Locate user field in the left, below the Select Domain option.
• Now, click Change photo and upload the photo.
• Click Save.

Manage users' photos in AD and Exchange through user creation and modification templates

ADManager Plus allows you to manage users' photos in AD, Microsoft 365 and Exchange through user creation and modification templates.

Steps to manage user photos using templates

1. Log in to ADManager Plus.
2. Click the Management tab.
3. Click User Management in the left pane and navigate to User Templates.
4. Click either User Creation Templates or User Modification Templates.
5. To manage user photos, click the icon next to the preferred template from the existing templates to edit or select Create New Template from the top right corner of the page.
6. Select Enable Drag-and-drop to customize the templates.
7. In the General section, drag and drop the User Photo attribute from the Field Tray to any preferred location.
8. In the Edit User Photo dialog box that appears, the user photo can be uploaded from the system by choosing the Browse option. You can also manage the photo of Microsoft 365 users directly from here.
9. The user photo can be uploaded by choosing any of the photo attributes (thumbnailPhoto, exchangePhoto, thumbnailLogo, photo, jpegPhoto) from the drop down list.

Example: A high resolution photo for a user in Exchange can be uploaded by selecting the exchangePhoto attribute from the drop down list.

By following the above steps in User Modification Templates or User Creation Templates, the administrator can manage user photos in AD, Exchange, and Microsoft 365.

Delete user photo

To delete the user's photo in AD and Exchange, follow the steps given below.

Steps to delete a user photo

1. Click the Management tab.
2. Under User Management, click Manage User Photos located under Bulk User Modification.
3. In the Modify users' profile photos page, select the domain in which the user whose photo has to be modified is located. All the users in the selected location will be listed along with their photos.
4. From the list of users, click the user whose photo you wish to delete.
5. In the Select Photo window that pops up, click Remove to delete the user photo.

FAQs related to the photo management feature

1. How can I modify the photo for only one (single) user?

   Locate the desired user using the search option provided on the left extreme of the manage user photos page and click the desired user. Select the relevant photo using the Change photo option provided in the window that pops up, and save.

2. How can I apply a photo for an entire department?
   • Name the photo to be updated with exactly the same name of the department (for example: sales.jpg).
   • Using the Import Photos option, specify the format value to be used (for matching the photo to the object) as %department% and import the photo.
   • Review it once, select all the users, and click Apply.
3. The user I want to modify is not displayed when I search using the locate user option. Why?

   This issue could be due to any of these reasons.

   • If the user account is a new one, click the refresh icon placed at the top left corner of the pane where the users are displayed, and search again.
   • If you are trying to locate the user using an attribute other than the displayName or sAMAccountName, chances are the value might have changed. Run the All Users report, locate the user, confirm the value of the attribute that you are using, and try again.
   • Sometimes, insufficient permissions could also cause this issue. Check if you have permission to view the users in the particular OU where the user is located.
4. I am importing photos for bulk modification of users' photos, but a particular user is not in the list displayed. What should I do?

   This issue could be due to any of these reasons.

   • Ensure that the size of the photo for the particular user does not exceed the maximum limit. The maximum allowed size for thumbnailPhoto is 100KB, for thumbnailLogo it is 32KB, and for jpegPhoto and photo, it is 10MB.
   • If you are using an attribute other than the displayName and sAMAccountName as the file name format for importing the photos, the value for the particular attribute might have changed recently. Please run the All Users report, confirm the value of the attribute, and try again.
   • If the attribute used while importing the photos is a custom attribute, please ensure that it is configured in the Admin tab of ADManager Plus and has user reports selected in the associated reports.
5. I have tried all the solutions mentioned in the FAQ section, but the issue still persists.

   We suggest that you contact our support team at support@admanagerplus.com, and we will assist you in resolving the issue.

Modify Logon Workstation

You can choose the list of workstations to which the users can/cannot log in.

Procedure

First, set the workstation on to which the users can/cannot log in. Then, apply the same to the desired list of users.

1. Select the AD Mgmt tab.
2. Click the Modify Logon Workstation link available under General Attributes. This opens the Modify user logon workstations dialog.
3. Select the option 'Allow all computers' to allow user to logon to all computers.
4. Select the option 'Allow selected computers' to restrict users to selected computers.
5. You can manually add or remove computers or click on the icon to select.
6. Select the domain and search the users. You can limit your search to specific OU's of the domain by clicking the Select OU link and selecting the OU's.

1. You can now use one of the following options to list the contacts whose group attributes have to be modified:

a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

Or

b) Use the Search option to find the user (Note To list all the users, just click the Search button without typing anything in the Search box)

8. Now, use the check box to select the desired list of user (s) and then click Apply

The change summary and the status of the modification can be verified.

Modifying Inheritable Permissions

You can modify the inheritable permissions of objects and users i.e. you can allow or restrict a object from gaining permissions from its parent object.

Procedure

First, use the check box to decide whether or not the inheritable permissions will propagate from the parent object. Then apply the same to the desired list of users.

Steps

1. Select the AD Mgmt tab.
2. Click the Modify Inheritable permissions link available under General Attributes. This opens the Modify user Inheritable Permissions dialog.
3. Use the checkbox to 'allow' or 'restrict' the inheritance from their parent object.
4. You can now use one of the following options to list the contacts whose group attributes have to be modified:

a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

Or

b) Use the Search option to find the user (Note To list all the users, just click the Search button without typing anything in the Search box)

5. Now, use the check box to select the desired list of user (s) and then click Apply

The change summary and the status of the modification can be verified.

Roll over the mouse over the icon to see the attributes in the windows native UI.

Move / Delete Home Folders and Profile Paths

This feature lets you perform the following actions for users individually as well as in bulk:

1. move home folders to a desired location.
2. delete home folders and clear their associated AD attributes.
3. move profile paths to a desired location.
4. delete profile paths and clear their associated AD attributes.

You can also specify whether or not you want to retain a copy of the home folder or profile folder in its original location.

Steps

1. Click the AD Mgmt tab.
2. Select the User Management link, located in the left pane.
3. Click the Move/Delete Home Folders link available under Bulk User Modification.

4. a. If you want to move home folders to another location: 

   -Click the Move Home Folder option. 
   -Select  Move Home Folder To.
   -Specify the location where you want to move the home folders in the field provided. Only Universal Naming Convention path is supported. The format should be: \\file-servername\shared directory name
   -Select  Retain a copy in the original location, if you want a copy of the home folder to exist in its original location as well.

   b. If you want to delete home folders:

   -Click the Delete Home Folder option. 
   -Select  Delete Remote Home Folders.

   c. If you want to move profile paths to another location: 

   -Click the Move Home Folder option. 
   -Select  Move Profile Path To.
   -Specify the location where you want to move the profile paths in the field provided. Only Universal Naming Convention path is supported. The format should be: \\file-servername\shared directory name
   -Select  Retain a copy in the original location, if you want a copy of the profile folder to exist in its original location as well.

   d. If you want to delete profile paths:

   -Click the Delete Home Folder option. 
   -Select  Delete Roaming Profiles.

5. Select the domain (and specific OUs, if you do not wish to perform this action for all users in the domain) to locate the users whose home folder/profile path attributes have to be modified.

6. You can use either of the following options to specify the users:

   a. Import a CSV file containing users' details.

   -Click CSV Import.
   -Choose the appropriate CSV file from your computer.
   -Click  Go.

   b. The built-in Search option.
   -Enter the names and click Search. To list all the users available in the selected domain (or OU), simply click Search without typing anything in the field.
   -Select the desired user(s) from the list and click Apply.

Modify Custom Attributes

ADManager Plus allows you to add/ modify custom attributes that are present in Active Directory schema but not in ADManager Plus. You can use these attributes based on your requirement during user creation and modification.

Procedure:

First, enter the LDAP name, value and Data type of the custom attribute to be modified and then apply the same to desired list of users.

Steps

1. Select the AD Mgmt tab.
2. Click the custom Attributes link available under General Attributes. This opens the Modify custom Attributes of the Users dialog.
3. Enter the LDAP name and value,then select the data type from the given options.

4. You can now use one of the following options to list the contacts whose group attributes have to be modified:

a) You can import the CSV file (sample CSV file) which contains the list of users. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

Or

b) Use the Search option to find the user (NoteTo list all the users, just click the Search button without typing anything in the Search box)

5. Now, use the check box to select the desired list of user (s) and then click Apply

The change summary and the status of the modification can be verified.strong

Delete users

It is always important to keep the Active Directory clean. As part of the cleanup process, administrators flush out the Inactive/disabled user accounts from the Active Directory using this feature.

How to delete bulk user objects using ADManager Plus?

To delete user objects, you have to the list the users in the domain by either using a CSV file or using the Search option. Then, select the desired user (s) to be deleted and finally hit the apply button.

Steps

1. Select the AD Mgmt tab.
2. Click the Delete Users link available under General Attributes. This opens the Delete User Accounts from Active Directory dialog.
3. Click the Configure Delete Policy link to specify other user related folders ( Roaming profiles,Remote Home folders, etc) that need to be removed during user deletion.

1. From the drop down menu, select the domain in which the users are located.( Note If you know the OU in which the users are located, click the add OUs button and select the appropriate OU)
2. You can now use one of the following options to list the computers that have to be deleted.

a) Import the CSV file (sample CSV file) which contains the list of computers that have to be deleted. After importing the CSV file, from the drop down menu (on the right hand side), select the attribute based on which you want ADManager Plus to search the user objects in Active Directory.

Or

b) Use the Search option to search for the users (Note To list all the users in the domain, hit the search button without entering anything in the Search box.

• Now, use the check box to select the desired list of user objects to be deleted.
• Click on Apply to confirm the deletion.

The change summary and the status of the modification can be verified.

Enable/Disable Active Directory Users

This feature makes it possible to enable or disable multiple user accounts and also specify the account expiry date, at one go.

Procedure

In the enable/disable users feataure, select the action (enable/disable) and also the appropriate account expiry date. Select the desired domain/the OUs. Locate the users to be enabled/disabled using the search option or specify the user accounts via a CSV file.

Steps

1. Click the Management tab.
2. In User Management, go to Bulk User Modification →Enable/Disable users
3. In the 'Modify Account Attributes of Users' page,
   • Select the required option in Enable/Disable option, as per your requirement.
   • Use the Account Expires option to specify an expiry date for the account, if needed.
4. Select the domain in which the desired user accounts are located; you can also specify the appropriate OUs using Add OUs option.
5. Specify the users for whom this task has to be performed using:
• A CSV file, which has the users list, using CSV Import option
• The search option to locate the desired users
6. Confirm the users for whom this change has to be done by selecting the required users from the list of users fetched from the CSV file or by the search feature.
7. Click on Apply to complete this operation.

Modify Skype for Business / Lync Policies

This feature helps you to modify the Skype for Business / Lync Server policies applied to Active Directory users for whom the Skype/Lync Server communication option has been enabled.

Procedure

Configure the required Skype for Business / Lync Server policies like conferencing policy, telephony policy and archiving policy in your Lync Server. Then, using the modify Skype (Lync) policies feature, select the required policies and associate them to the desired users in your Active Directory.

Steps:

1. Click on Management tab.
2. In User Management, go to Bulk User Modification --> Modify Skype (Lync) Policies
3. In the Modify Skype (Lync) Policies page, select the policies (Conferencing policy, Telephony policy and Archiving policy), select the desired policy from the list of policies available under each category (Conferencing policy, Telephony policy and Archiving policy).
4. Select the domain in which the desired user accounts are located; you can also specify the appropriate OUs using Add OUs option.
5. Specify the users for whom this task has to be performed using any of these options:
   • Importing the CSV file with the users list via CSV Import option
   • The search option to locate the desired users
6. Confirm the users for whom this change has to be done by selecting the required users from the list of users fetched from the CSV file or by the search feature.
7. Click Apply to apply the new policies to all the selected users.