1. Can ADtoolkit modify the Active Directory User names such as the Display Name, Full Name and Logon Name?
Yes, ADtoolkit can easily change either single or multiple user names. For single users, simply select the user from the home tab, and select Properties from the ribbon. The first operation, User Names, allows you to set the users Full Name, Display Name, Pre-Win2K Name, and User Logon Name.
If all your users are in the same OU, simply select the wanted users from the home tab, and click Modify in the ribbon. The first operation, User Names, allows you to set the users Full Name, Display Name, Pre-Win2K Name, and User Logon Name.
If you have a file with the user names to change, select the Import User Changes tool under the Import menu in the home tab. Follow the import wizard, and specify the new user names on the Tool Settings page.
If all the users have common traits, such as all being Domain Admins, ADtoolkit Collections can be used. Go to the Collections tab, a select a collection that meets you needs. Then, preview the collection from the ribbon to ensure only the wanted users will be updated, and run the Modify tool.
If all your users are in the same OU, simply select the wanted users from the home tab, and click Modify in the ribbon. The first operation, User Names, allows you to set the users Full Name, Display Name, Pre-Win2K Name, and User Logon Name.
If you have a file with the user names to change, select the Import User Changes tool under the Import menu in the home tab. Follow the import wizard, and specify the new user names on the Tool Settings page.
If all the users have common traits, such as all being Domain Admins, ADtoolkit Collections can be used. Go to the Collections tab, a select a collection that meets you needs. Then, preview the collection from the ribbon to ensure only the wanted users will be updated, and run the Modify tool.
2. How can I import passwords for my Active Directory users?
Yes, ADtoolkit provides a Reset User Passwords operation for this. From the Home View, select the users whose passwords to update, and run the Modify tool. From the Modify Password operation in Security group, you can set passwords to either a static password or a random password following a set of rules defined by clicking the Edit Password Options link.
If you wish to import a list of users and passwords, you may do so by running the Import User Changes tool with with a CSV file containing 1 or more columns with which to identify the users and a column with new passwords.
A sample CSV file might look like:
userPrincipalName, Password
JDoe, 3drclpy@hdz
JDoe1, Hoo045k&
In the Import Wizard, skip any columns that you do not wish to import, select your set of identifying columns, and ensure that each of your imported columns have been mapped to the correct attribute.
If you wish to import a list of users and passwords, you may do so by running the Import User Changes tool with with a CSV file containing 1 or more columns with which to identify the users and a column with new passwords.
A sample CSV file might look like:
userPrincipalName, Password
JDoe, 3drclpy@hdz
JDoe1, Hoo045k&
In the Import Wizard, skip any columns that you do not wish to import, select your set of identifying columns, and ensure that each of your imported columns have been mapped to the correct attribute.
3. In the Modify Users tool and the Add Users Tool in the Security operation, what do the options mean: “Password not required” and “Password required via group policy”?
This might happen for one of two reasons. First, if you are using a version prior to 2.5 of ADtoolkit or one of its Elements, then whenever the actual attribute for a particular user is empty (i.e. not set) then the report will leave the cell blank for that user. Starting with 2.5, however, the cell will contain the text: <Not Set>.
The second possibility is that the syntax of the attribute is one that ADtoolkit is unable to print, for example, the Logon Hours attribute is not yet handled by ADtoolkit and therefore it prints a blank space. Note that this second possibility rarely happens as most unsupported attributes are clearly marked as unsupported and you will be unable to add them to the report.
The second possibility is that the syntax of the attribute is one that ADtoolkit is unable to print, for example, the Logon Hours attribute is not yet handled by ADtoolkit and therefore it prints a blank space. Note that this second possibility rarely happens as most unsupported attributes are clearly marked as unsupported and you will be unable to add them to the report.
4. When I set the Profile Path and the Home Folder path, can I use the %username% variable?
Yes, you can use the %username% variable in either the Home Folder path, the Profile path, the Terminal Services Home Folder path, or the Terminal Services Profile path. When included in any of these settings, this variable will be replaced with the current user's Netbios name (a.k.a. the Pre-Win2K Logon Name). For example, if a user’s Netbios name is JoanToohey12 and the Home Folder path is set to \\server1\HomeDirShare\%username%, then the resulting Home Folder for that user will become: \\server1\HomeDir Share\JoanToohey12. Also note that if the Home Folder directory does not already exist, ADtoolkit will also create the new Home Directory and will set either default security settings or alternatively whatever settings you specify.
5. Can ADtoolkit create user Home Directories without having to enter each one individually?
Yes, you can use the %username% variable to force ADtoolkit to automatically create a uniquely named Home Directory for the current user. This variable refers to a user’s Netbios name (or Pre-Win2K Logon Name) and the resulting directory will be named accordingly. For more information see here.
6. Can ADtoolkit create profile directories?
Unlike the Home Folder directory, ADtoolkit does not automatically create profile directories when users are added or modified. However, the profile directories are automatically created by Windows whenever a user logs in for the first time.
7. User Must Change Password at Next Login: I have a bunch of users with this option currently checked. Is it possible to use ADtoolkit to set them all to not checked?
Yes, select the Search and Replace User Tool and select the Common Property for Must Change Password. Select Find: True and Select Replace: False.