1. What is the difference between ADtoolkit Common Properties and AD Attributes?
Common Properties are named by Javelina Software and are comprised of some of the more common AD attributes as well as several properties that cannot be modified directly by changing an AD attribute. AD Attributes, on the other hand, are the actual LDAP attribute names used internally by Active Directory.
2. I am attempting to import a CSV file into the Modify Users tool and receive the message: Error: The Distinguished Name field in record #1 was empty.
Check the file you’re using to import. To import into the Modify Users tool, you must create a comma separated value (CSV) file, which, at a minimum, must contain the distinguished names of the users to be imported. The CSV file is simply a text file, where the first line of the file contains a comma separated list of field names, and each subsequent line is a record containing the fields specified in the first line.
A sample CSV file would look like:
Distinguished Name, Home Phone, Business Phone
‘CN=Joe Doe,OU=Users,DC=MyDomain,DC=com’, 410-555-1212, 410-555-1213
‘CN=Jane Doe,OU=Users,DC=MyDomain,DC=com’, 410-555-1214, 410-555-1215
Note: As of version 6.0, ADtoolkit no longer requires import files to contain a line at the top with field names. Fields are now resolved during the import process.
1. Can ADtoolkit modify the Active Directory User names such as the Display Name, Full Name and Logon Name?
Yes, ADtoolkit can easily change either single or multiple user names.
For single users, simply select the user from the home tab, and select Properties from the ribbon. The first operation, User Names, allows you to set the users Full Name, Display Name, Pre-Win2K Name, and User Logon Name.
If all your users are in the same OU, simply select the wanted users from the home tab, and click Modify in the ribbon. The first operation, User Names, allows you to set the users Full Name, Display Name, Pre-Win2K Name, and User Logon Name.
If you have a file with the user names to change, select the Import User Changes tool under the Import menu in the home tab. Follow the import wizard, and specify the new user names on the Tool Settings page.
If all the users have common traits, such as all being Domain Admins, ADtoolkit Collections can be used. Go to the Collections tab, a select a collection that meets you needs. Then, preview the collection from the ribbon to ensure only the wanted users will be updated, and run the Modify tool.
2. How can I import passwords for my Active Directory users?
Yes, ADtoolkit provides a Reset User Passwords operation for this. From the Home View, select the users whose passwords to update, and run the Modify tool. From the Modify Password operation in Security group, you can set passwords to either a static password or a random password following a set of rules defined by clicking the Edit Password Options link.
If you wish to import a list of users and passwords, you may do so with a CSV file containing columns with the users' names and new passwords.
A sample CSV file would look like:
First Name, Last Name, Password
John, Doe, 3drclpy@hdz
Jane, Doe, Hoo045k&
To import the data, select the Import User Changes tool from Import dropdown in the Home View. From the import wizard, select your import file and identify objects by their first and last name.
3. In the Modify Users tool and the Add Users Tool in the Security operation, what do the options mean: “Password not required” and “Password required via group policy”?
If there is an existing Group Policy that states that passwords ARE required, the “Password not required” option will override it. It is NOT possible however to override a Group Policy where passwords are NOT required.
4. When I set the Profile Path and the Home Folder path, can I use the %username% variable?
Yes, you can use the %username% variable in either the Home Folder path, the Profile path, the Terminal Services Home Folder path, or the Terminal Services Profile path. When included in any of these settings, this variable will be replaced with the current user's Netbios name (a.k.a. the Pre-Win2K Logon Name). For example, if a user’s Netbios name is JoanToohey12 and the Home Folder path is set to \\server1\HomeDirShare\%username%, then the resulting Home Folder for that user will become: \\server1\HomeDir Share\JoanToohey12. Also note that if the Home Folder directory does not already exist, ADtoolkit will also create the new Home Directory and will set either default security settings or alternatively whatever settings you specify.
5. Can ADtoolkit create user Home Directories without having to enter each one individually?
Yes, you can use the %username% variable to force ADtoolkit to automatically create a uniquely named Home Directory for the current user. This variable refers to a user’s Netbios name (or Pre-Win2K Logon Name) and the resulting directory will be named accordingly. For more information see here.
6. Can ADtoolkit create profile directories?
Unlike the Home Folder directory, ADtoolkit does not automatically create profile directories when users are added or modified. However, the profile directories are automatically created by Windows whenever a user logs in for the first time.
7. User Must Change Password at Next Login: I have a bunch of users with this option currently checked. Is it possible to use ADtoolkit to set them all to not checked?
Yes, select the Search and Replace User Tool and select the Common Property for Must Change Password. Select Find: True and Select Replace: False.
1. What are the basic steps for using the Reports Tab?
Below are step by step directions for executing a pre-existing report. This example will walk through how to run a builtin user report. The process, however, is identical for the other objects.
Open the reports tab from navigation pane in the bottom left or from the tabs across the top of the main interface.
Select the report category from the ribbon. In this case, we'll select Users.
Choose one of the builtin reports from the tree on the left hand side, such as Account Creation Dates
Modify the Report Scope and Output settings from the Report Properties pane.
Verify the report has the needed information from the Interactive Preview on the right hand side.
Run the report by selecting Run from on the ribbon.
2. Can ADtoolkit report on nested groups and nested group membership?
Yes. Adtoolkit provides several reports for showing group membership. To see the groups an object is a member of, select the object type from the ribbon (Users, Contacts, Computers) and open either the Group Membership or Group Membership (Nested) report. To view the groups or nested groups of a group, open the Group report category from the ribbon and select either the Group Membership in Other Groups or Group Membership (Nested) report. You can also view the members of a group with the Group Members group report.
To run any ADtoolkit report, simply select Run from the ribbon, or right-click on the report from the Report Tree, and select Run Now. For more information on the Reports View, see here.
3. I am attempting to Report on an AD Attribute or Common Property but although users are added to the report, the AD Attribute or Common Property column is empty.
This might happen for one of two reasons. First, if you are using a version prior to 2.5 of ADtoolkit or one of its Elements, then whenever the actual attribute for a particular user is empty (i.e. not set) then the report will leave the cell blank for that user. Starting with 2.5, however, the cell will contain the text: <Not Set>.
The second possibility is that the syntax of the attribute is one that ADtoolkit is unable to print, for example, the Logon Hours attribute is not yet handled by ADtoolkit and therefore it prints a blank space. Note that this second possibility rarely happens as most unsupported attributes are clearly marked as unsupported and you will be unable to add them to the report.
1. What are ADtoolkit Custom Tools?
ADtoolkit Custom tools allow the creation of tools specific to your environment. Below are some of the features of custom tools:
Required Fields – Prevent tools from running until all required fields have data.
Default Values - Allows admins to pre-fill information into controls to speed up tool execution. ADtoolkit also allows admins to modify labels for controls, for example, a school system might change the manager field from reading "Manager" to "Teacher", in their Add Student tool.
Disable Fields – Set the value of a field to read-only.
Hide Operations and Operation Groups – Allows admins to show or hide operations or operation groups so that users will not see these controls. Hidden fields will still run during execution, allowing for simplified yet powerful custom tools.
Auto Generate – Automatically fill in fields with data from other fields during tool execution, using custom templates. For example, a field with the auto generator template "%FirstName%%LastName%" will be replaced with the users First and Last Name when information in entered into the First and Last Name fields.
Once created Custom Tools can be added to the ribbon menus throughout the product through the "Edit My Tools" menu button in the tool editor view.