Home > Products > ADtoolkit > FAQs
ADtoolkit Frequently Asked Questions

Questions

  1. When I set the Profile Path and the Home Folder path, can I use the %username% variable?
  2. Can ADtoolkit create user Home Directories without having to enter each one individually?
  3. Can the Home Directories be created as hidden shares?
  4. Can ADtoolkit create profile directories?
  5. Can ADtoolkit modify the Active Directory User names such as the Display Name, Full Name and Logon Name?
  6. In the Modify Users tool and the Add Users Tool on the Security tab, what do the options mean: “Password not required” and “Password required via group policy”?
  7. What is the difference between ADtoolkit Common Properties and AD Attributes?
  8. I am attempting to import a CSV file into the Modify Users tool and receive the message: Error: The Distinguished Name field in record #1 was empty.
  9. I am attempting to Report on an AD Attribute or Common Property but although users are added to the report, the AD Attribute or Common Property column is empty.
  10. What are the basic steps for using the Reports Tool?
  11. What are ADtoolkit Custom Tools?
  12. User Must Change Password at Next Login: I have a bunch of users with this option currently checked. Is it possible to use ADtoolkit to set them all to not checked?
  13. Does ADtoolkit Group reports tell me which groups are nested groups?
  14. How can I import passwords for my Active Directory users?

Answers

1. When I set the Profile Path and the Home Folder path, can I use the %username% variable?

Yes, you can use the %username% variable in either the Home Folder path, the Profile path, the Terminal Services Home Folder path, or the Terminal Services Profile path. When included in any of these settings, this variable will be replaced with the current user's Netbios name (a.k.a. the Pre-Win2K Logon Name). For example, if a user’s Netbios name is JoanToohey12 and the Home Folder path is set to \\server1\HomeDirShare\%username%, then the resulting Home Folder for that user will become: \\server1\HomeDir Share\JoanToohey12. Also note that if the Home Folder directory does not already exist, ADtoolkit will also create the new Home Directory and will set either default security settings or alternatively whatever settings you specify.

2. Can ADtoolkit create user Home Directories without having to enter each one individually?

Yes, you can use the %username% variable to force ADtoolkit to automatically create a uniquely named Home Directory for the current user. This variable refers to a user’s Netbios name (or Pre-Win2K Logon Name) and the resulting directory will be named accordingly. For more information see FAQ #1.

3. Can the Home Directories be created as hidden shares?

Yes, when adding new users or modifying existing users, ADtoolkit can not only create a Home Folder directory, but is also capable of creating a hidden share that points directly to the user’s new Home Folder. Just go to the Profile Tab, select the Connect To button, specify a Connect To Drive, and type in \\servername\%username%$. This will enable the Create Home Folder Share option. Now click on the Share Path button and browse for the Physical location and click on OK. After clicking OK, you will notice that %username% gets automatically added to the share path. (Please note that this is the correct syntax and you do not need to append the $ sign to this path.) Of course, you will also need to specify share permissions and you may wish to specify the Home Folder security as well.

4. Can ADtoolkit create profile directories?

Unlike the Home Folder directory, ADtoolkit does not automatically create profile directories when users are added or modified. However, the profile directories are automatically created by Windows whenever a user logs in for the first time.

5. Can ADtoolkit modify the Active Directory User names such as the Display Name, Full Name and Logon Name?

Yes, ADtoolkit is capable of changing all the various name types by changing the appropriate AD attribute using the Modify Users tool. For example, suppose you wish to change the name which shows up in the MMC Users and Computers tool to match the user's Netbios name (a.k.a. the Pre-Win2K logon name). To do so you will need to change the CN portion of their Distinguished name. You can do this by using either the ADtoolkit Common Property called Full name or the AD attribute cn. They both modify the same attribute called cn. Follow the steps below to change a group of users' Full names (or cn) to match the users' Netbios names:

  1. Run a report on the user's Distinguished Name & Netbios names and save the output to a file.
  2. Open the output file and change the column called Netbios to either Full Name or cn.
  3. Import this file into the Modify User tool. Make sure that you have unchecked the box labeled "Import Distinguished Name Only' in the import dialog box.
  4. Click on Run Simulation, and examine the output. If all went well, then click on Run Now.

This same method can be used to change any of the other user names: Display, Netbios, Logon, First, or Last.

6. In the Modify Users tool and the Add Users Tool on the Security tab, what do the options mean: “Password not required” and “Password required via group policy”?

If there is an existing Group Policy that states that passwords ARE required, the “Password not required” option will override it. It is NOT possible however to override a Group Policy where passwords are NOT required.

7. What is the difference between ADtoolkit Common Properties and AD Attributes?

Common Properties are named by Javelina Software and are comprised of some of the more common AD attributes as well as several properties that cannot be modified directly by changing an AD attribute. AD Attributes, on the other hand, are the actual LDAP attribute names used internally by Active Directory.

8. I am attempting to import a CSV file into the Modify Users tool and receive the message: Error: The Distinguished Name field in record #1 was empty.

Check the file you’re using to import. To import into the Modify Users tool, you must create a comma separated value (CSV) file, which, at a minimum, must contain the distinguished names of the users to be imported. The CSV file is simply a text file, where the first line of the file contains a comma separated list of field names, and each subsequent line is a record containing the fields specified in the first line.

A sample CSV file would look like:

Distinguished Name, Home Phone, Business Phone
‘CN=Joe Doe,OU=Users,DC=MyDomain,DC=com’, 410-555-1212, 410-555-1213
‘CN=Jane Doe,OU=Users,DC=MyDomain,DC=com’, 410-555-1214, 410-555-1215
NOTE: As of version 6.0, ADtoolkit no longer requires import files to contain a line at the top with field names. Fields are now resolved during the import process.

9. I am attempting to Report on an AD Attribute or Common Property but although users are added to the report, the AD Attribute or Common Property column is empty.

This might happen for one of two reasons. First, if you are using a version prior to 2.5 of ADtoolkit or one of its Elements, then whenever the actual attribute for a particular user is empty (i.e. not set) then the report will leave the cell blank for that user. Starting with 2.5, however, the cell will contain the text: <Not Set>.
The second possibility is that the syntax of the attribute is one that ADtoolkit is unable to print, for example, the Logon Hours attribute is not yet handled by ADtoolkit and therefore it prints a blank space. Note that this second possibility rarely happens as most unsupported attributes are clearly marked as unsupported and you will be unable to add them to the report.

10. What are the basic steps for using the Reports Tool?

Below are step by step directions for executing a pre-existing report. Although the Reporting Engine can work on users, contacts, computers or groups, the directions below are specific to users. The process, however, is identical for the other objects. For instance, to create group reports, simply replace step one with selecting the Group Reports Tool. Or, to create contact reports, replace step one with selecting the Contact Reports Tool.

  1. Open the User Reports Tool by selecting the Tools | Users | Reports menu command or shortcut bar icon.
  2. Proceed to the Select Domains/OUs tab and click on the Add Domains/OUs button. Browse through the list of Domains and OUs in your network and select one or more container you wish to report on. When you have finished selecting containers click on the OK button.
  3. Proceed to the Report Type tab and select a report from the list of existing reports.
  4. To write the report out to a CSV file for future reference, proceed to the Report Output File box on the Output tab page and select the Create an Output File checkbox.
  5. Since there really is no simulation mode when executing reports, you may now click on the Run Now button or select it from the Run Menu. The Report Users tool will be launched and the report will be created.

11. What are ADtoolkit Custom Tools?

ADtoolkit provides a way for administrators to deliver customized tools to other licensed admins within the organization. Below are some of the things you can do with custom tools:

  1. Require Data Entry– Allows admins in charge to require users to enter data (without these settings filled, the custom tool will not operate at runtime),
  2. Pre-set data - Allows admins in charge to pre-fill information that shows up in the distributed version of the custom tool, this information can be changed by the end user,
  3. Fill and Disable Data – Allows admins in charge to pre-fill information that shows up in the distributed version of the custom tool, this information can not be changed by the end user,
  4. Hide Tabs and Group settings – Allows admins in charge to hide settings and tabs so that the user will not be able to see options or settings. This will benefit other parts of the organization who may only need to perform specific tasks and need not be bothered by extra information and fields not necessary to perform their tasks.

Once created Custom Tools can be delivered via email or distribution. To distribute the tools, go to the Tools Menu and select Custom Tools | Distribute.

12. User Must Change Password at Next Login: I have a bunch of users with this option currently checked. Is it possible to use ADtoolkit to set them all to not checked?

Yes, select the Search and Replace User Tool and select the Common Property for Must Change Password. Select Find: True and Select Replace: False.

13. Does ADtoolkit Group reports tell me which groups are nested groups?

Yes, Go to the Group Reports Tool and select the report called “Nested Groups” and select Run Now. This report will tell you the Distinguished Name of the Group, the Group Names and the Group Count.

14. How can I import passwords for my Active Directory users?

ADtoolkit provides a Reset User Passwords tool for resetting user passwords. Simply select the users whose passwords you wish to modify on the Select Users tab, then navigate to the Options tab and choose to either create random passwords, create blank passwords, or use a given password for the selected users.

If you wish to import a list of users and passwords, you may do so with a CSV file containing columns with the users' names and new passwords. A sample CSV file would look like:

Distinguished Name, Password
‘CN=Joe Doe,OU=Users,DC=MyDomain,DC=com’, 3drclpy@hdz
‘CN=Jane Doe,OU=Users,DC=MyDomain,DC=com’, Hoo045k#

Once you have created the CSV file, import the data to the tool by clicking the Import button on the Select Users tab. Then, click Run Now to reset the users' passwords.

 

Buy ADtoolkit


$1295.00

ADtoolkit

AD Management and Reporting

View the Feature Tour

Award-Winning

Try ADtoolkit

Download Free Trial

Get a Quote

Use our Quote Request Form or call 1-800-397-5484 to get a quote today.

Community

Go to Forums