SetConnect

ADmodifyUser

Active Directory::ADmodifyUser

Description

Modify an account on an Active Directory domain.

The main installation directory should contain a file named "ActiveDirectoryEdit.Config" which contains the Active Directory propery-values that can be used by the plugin. Each line contains one property and has the following format:

{groupname}:{description}:{propertyname}

{groupname} can be used to group different properties together
{description} is the description of the property
{propertyname} is the actual exact name of the Active Directory property that must be set

NOTE: requires LDAP compatible machine (like Windows 2003,2008)

Active Directory - ADmodifyUser
Options
Domain

The fully qualified Active Directory domain name. If "Local Machine" is checked this will be set to "RootDSE" which specified the domain the local machine is a member of.

Windows 2008: compatible with windows 2003/2008 servers
Windows 2012: compatible with windows 2012 servers

Username
Optional. The username to use to connect with the server.
Password
Optional. The password to use to connect with the server.
Logon name
The "logon name" of the account that must be modified.
Organizational unit
Optional value which specifies the Organizational Unit which contains the specified account. If left empty the account will be created in the default "Users".
Account Properties
Enable / Disable
Enable or disable the account.
Change password
Set the password of the account.
Expiration
Disable or set the account expiration date.
User must change password at next logon
When checked, the "User Must Change Password At Next Logon" flag is set.
User cannot change password
When checked, the "User Cannot Change Password" flag is set.
Unlock account
When checked, the account will be unlocked.
Active Directory Properties
Load Property List
Loads the properties from the "ActiveDirectoryEdit.Config" file. Properties that are already in the list will not be overwritten/reset by the properties that are loaded from the file.
Cleanup List
All rows of which the "Value" column is empty will be removed from the list.
Note that if you want to clear a property-value, this property should remain in the list with an empty "Value".
Group Membership
Make user member of groups
Make the account a member of the configured groups. Specify the complete path of the group.
Examples:
CN=Domain Admins,CN=Users
CN=Demo Group,OU=Sales Department
Remove user from groups
Remove the account from the configured groups. Specify the complete path of the group.
Examples:
CN=Domain Admins,CN=Users
CN=Demo Group,OU=Sales Department

Documentation

Release notes