Feature Summary

The tables below summarize major features offered by Softerra Adaxes.

General Features

Softerra Adaxes includes a wide variety of features essential to create a reliable and secure environment for streamlined and automated Active Directory management.

Name	Description
Role-Based Security Administration	Role-based administrative model enables administrators to efficiently distribute permissions by assigning specific Security Roles to AD users. For details, see Security Roles Overview.
Business Rules	With the help of Business Rules, administrators can automate their routine day-to-day tasks. For details, see Business Rule Overview.
Property Patterns	Property Patterns help to avoid repetitive entering of the same information and to observe multiple enterprise standards when creating or modifying Active Directory objects. For details, see Property Pattern Overview.
Business Units	Business Units are used to organize AD objects in an alternative way in order to manage them collectively. For details, see Business Unit Overview.
Custom Commands	Custom Commands are used to define sets of actions to perform custom tasks. Users can execute Custom Commands from Adaxes Web Interface and Administration Console in a single mouse click the same way they execute other operations. For details, see Custom Command Overview.
Scheduled Tasks	Scheduled Tasks are used to define sets of actions to perform at regular intervals. For details, see Scheduled Task Overview.
Password Self-Service	Password Self-Service allows users to self-reset their passwords from Adaxes Web Interface and Windows logon and unlock screens. For details, see Password Self-Service Overview.
SPML Connectors	SPML Connectors send SPML requests to registered SPML services, when certain operations are performed in Active Directory. For details, see SPML Connectors.
Web Interface Customization	The Web Interface can be configured separately for Administrators, Help Desk operators, and Self-Service. For each role, you can customize forms for object creation and modification, define which activities users can perform, allow users to view only specific Active Directory objects, disable certain features of the Web Interface, etc. For details, see Customizing Forms for Object Creation and Editing, Disallowing Specific Operations on AD Objects, Configuring Actions on Home Page.
Active Directory Reports	AD reports allow analyzing and monitoring the state of the Active Directory environment. For details, see Reports Overview.
Approval Requests	Approval-based model enables administrators to define operations that should be executed only after their execution is approved by a responsible person. For details, see Approvals and Requests.
Service Log	Administrators and auditors can view who performed what operations, when, on what objects, etc. For details, see Logging.
Load Balancing and Fault Tolerance	It is possible to install several Adaxes services that share their configuration. In this case, Adaxes clients are connected to the nearest available Adaxes service, that ensures fault tolerance and load balancing. For details, see Share Configuration between Services.
Backup/Restore Service Configuration	With the help of a special command-line tool (Softerra.Adaxes.BackupRestore.exe), the configuration of any Adaxes service can be backed up and restored. For details, see Backup/Restore Service Configuration.
Adaxes ADSI Provider	Using the Adaxes ADSI Provider users can implement the functionality that corresponds to the specific needs of their company. For details, see Adaxes ADSI Provider.
Adaxes SPML Provider	Adaxes SPML Provider is a web service running by IIS that receives SPML requests and transforms them in AD operations. For details, see Adaxes SPML Provider.

Directory Management

To manage Active Directory, users can use either the Windows-based administrative environment, called Service Administration Console or the web-based Adaxes Web Interface.

Feature	Description	Web Interface	Admin Console
Object Modification	Users can modify properties of AD objects using a variety of tools, including views and property pages specific for certain object types, and advanced, but still easy-to-use wizards that provide powerful capabilities to modify properties of any AD object.	Yes	Yes
Group Membership Management	Users can easily add or remove members of AD groups, view the groups, to which AD objects belong, and view direct or indirect members of AD groups. See Modifying Object Group Membership and Adding or Removing Group Members.	Yes	Yes
Enhanced Object Renaming	When renaming user, group or contact objects, Softerra Adaxes offers to update other properties related to the object name. See Renaming Objects.	Yes	Yes
Moving Directory Objects	Using Drag'n'Drop, the clipboard or special dialogs, users can move AD objects either within one domain or across different AD domains. See Moving Objects.	Yes	Yes
Enabling/Disabling User Accounts	Users can enable or disable accounts of other users. All users whose accounts are disabled are marked with a special icon. See Enabling/Disabling User Account.	Yes	Yes
Configuring Fine-Grained Password Policies	Enables defining different password and account lockout policies for different sets of users in an AD domain. See Configure Fine-Grained Password Policy.		Yes
Changing/Resetting User Passwords	Users can change their own passwords or reset passwords of other users. Also users can reset own passwords with the help of Password Self-Service. See Resetting User Password and Changing User Password.	Yes	Yes
Resetting Computer Accounts	Users can reset computer accounts. See Resetting a Computer Account.	Yes	Yes
Enabling/Disabling Computer Accounts	Users can enable or disable computer accounts. All disabled computer accounts are marked with a special icon. See Enabling/Disabling Computer Account.	Yes	Yes
Unlocking User Account	Users can unlock accounts of other users. See Unlocking User Account.	Yes	Yes
Creating Users/InetOrgPersons	Enables users to create new User/InetOrgPerson objects. See Creating User.	Yes	Yes
Creating Groups	Enables users to create new AD Groups. See Creating Groups.	Yes	Yes
Creating Contacts	Enables users to create Contacts for external users. See Creating Contact.	Yes	Yes
Creating Computers	Enables users to create new Computer objects. See Creating Computers.	Yes	Yes
Creating Organizational Units	Enables users to create new Organizational Unit objects. See Creating Organizational Unit.	Yes	Yes
Creating Containers	Enables users to create new Container objects. See Creating Container.	Yes	Yes
Publishing Shared Folders	Enables users to add new Shared Folder objects. See Publishing Shared Folder.		Yes
Copying Objects	Enables users to copy Active Directory objects. See Copying AD Objects.		Yes
Bulk Object Modification	Users can modify multiple AD objects in one operation. See Modifying AD Objects in Bulk.	Yes	Yes
Performing Custom Sets of Actions	Sets of actions for custom tasks can be automated and initiated by a single mouse click. See Executing Custom Commands.	Yes	Yes
Creating/Deleting Exchange Mailboxes	Enables to create and delete Exchange mailboxes for Active Directory users. See Creating Exchange Mailboxes, Deleting Exchange Mailboxes.	Yes	Yes
Establishing/Deleting E-mail Addresses	Enables to establish and delete external e-mail addresses for Active Directory users, contacts and groups. See Establishing E-mail Address, Deleting Email Addresses.	Yes	Yes
Removing Exchange Attributes	Enables to remove Exchange-related properties for Active Directory users, contacts and groups. See Removing Exchange Attributes.	Yes	Yes
Viewing Management History	Enables to view all operations perfomed on an AD object via the Adaxes service. See View Management History.		Yes
Viewing Management Activity	Enables to view all operations perfomed by an AD user via the Adaxes service. See View Management Activity.		Yes
Raising Domain/Forest Functional Level	Administrators can raise the functional level of AD domains and forests. See Raising Domain or Forest Functional Level.	Yes	Yes
Transferring Domain/Forest Operations Master Roles	Administrators can transfer operations master roles of AD domains and forests. See Transferring Domain or Forest Operations Master Roles.		Yes
Browsing Active Directory	Users can browse the hierarchy of the managed Active Directory domains. See Browsing Active Directory.	Yes	Yes
Browsing Business Units	Users can browse the alternative objects hierarchy created with the help of Business Units. See Browsing Business Units.	Yes	Yes
Standard Search	Allows users to locate AD objects by a wide variety of search parameters. The search can be performed either across all managed domains or in a specific domain location. See Searching Active Directory.	Yes	Yes
Quick Search	Enables users to find AD objects rapidly specifying the minimum of the search criteria. See Searching Active Directory.	Yes	Yes
Alphabetical Search	Allows users to search for AD objects by the first letter of their names. The search can be performed either across all managed domains or in a specific domain location. See Searching Active Directory.	Yes
Editing Native Secirity	Allows to edit native AD permissions for Active Directory objects. See Editing Native Security.		Yes
Printing Objects	Users can use special views intended for printing AD objects.	Yes
Sending Mails	Allows users to quickly send email messages to multiple AD users, contacts or groups of users or contacts. See Sending Email Messages.	Yes	Yes
Exporting Data	Administration Console allows exporting directory data to the following formats: LDIF, DSML, MS Excel, CSV, Plain Text and HTML. Export can be performed via the user interface or a command line tool. Web Interface allows exporting directory data to the CSV and vCard formats. See Exporting Directory Objects, Command Line Import and Export.	Yes	Yes
Importing Data	Allows users to import AD objects from the LDIF, DSML, and CSV formats. See Importing Directory Objects, Command Line Import and Export.		Yes
Basket	The Basket is helpful for the collective management of AD objects located in different subtrees of several Active Directory domains. See Using Basket in Administration Console, Using Basket in Web Interface.	Yes	Yes
Favorites	Using Favorites, users can access the frequently used AD objects with a single mouse click. See Adding Objects To Favorites, Locating Favorite Objects and Organizing Favorites.	Yes	Yes
LDAP Filter Builder	A tool that offers rapid, visual building and editing of LDAP filters. See Using LDAP Filter Builder.		Yes
Anixis PPE Support	Adaxes supports Anixis PPE v6.0 or later. Therefore, restrictions imposed by Anixes PPE are displayed to users when they change or reset passwords. See Configure Anixis PPE Settings.	Yes	Yes

Adaxes Service Management

The configuration of Adaxes services is managed by means of Service Administration Console.

Name	Description
Managing Multiple Services	Administrators can manage several Adaxes services installed on local or remote computers. See Connect To Adaxes Service.
Registering Managed Domains	Allows users to register and unregister domains managed by Adaxes services. See Register/Unregister Managed Domain and Change Account Used to Work with Managed Domain.
Managing Security Roles	Provides means to create, modify and assign Security Roles to AD users. See Creating Security Role, Modifying Security Role Permissions, Modifying Security Role Assignments, Modifying Parent Roles and Disabling Security Roles.
Creating/Modifying Business Rules	Administrators can create Business Rules and specify AD resources, on which these Business Rules will be effective. See Creating Business Rule, Modifying Business Rule Actions And Conditions, Modifying Business Rule Activity Scope and Disabling Business Rules.
Creating/Modifying Property Patterns	Allows administrators to create Property Patterns and specify AD resources, on which these Property Patterns will be effective. See Creating Property Pattern, Modifying Property Pattern, Modifying Property Pattern Activity Scope and Disabling Property Pattern.
Creating/Modifying Business Units	Allows creation and modification of Business Units. See Creating Business Units and Modifying Business Unit Membership Rules.
Creating/Modifying Custom Commands	Administrators can create Custom Commands that are available for users in the Adaxes Administration Console and Web Interface. See Creating Custom Command, Modifying Custom Commands, Executing Custom Commands, and Disabling Custom Commands.
Creating/Modifying Scheduled Tasks	Administrators can create Scheduled Tasks and specify AD resources, on which these Scheduled Tasks will be performed. See Creating Scheduled Task, Modifying Scheduled Task Actions and Conditions, Modifying Scheduled Task Activity Scope and Disabling Scheduled Tasks.
Managing Password Self-Service	Allows to create and modify policies for user self-password reset from Web Interface and configure settings for self-password reset from Windows logon and unlock screens. See Creating Password Self-Service Policy, Modifying Password Self-Service Policy, Configuring Winlogon Settings.
Creating/Modifying SPML Connectors	Allows creation and modification of SPML Connectors. See Creating SPML Connectors, Modifying SPML Connection Parameters, Modifying SPML Schema Mapping, and Specifying Operations to Send SPML Requests for.
Viewing Assigned Security Roles	Allows to view Security Roles assigned on a specific AD user or group. See Viewing Security Roles assigned to Users or Groups.
Viewing Effective Objects	Allows to view Security Roles, Business Rules and Property Patterns effective for a specific AD object. See Viewing Security Roles Effective for an Object, Viewing Business Rules Effective for an Object, Viewing Property Patterns Effective for an Object, Viewing Scheduled Tasks Effective for an Object.
Viewing Business Unit Membership	Allows to view the Business Units an AD object belongs to. See Viewing Business Units an Object Belongs to.
Viewing Password Self-Service Statistics	Allows to view statistcs on user enrollment in Password Self-Service, password resets and blocked users. See Viewing Statistics for Password Self-Service .
Restoring Built-in Objects	Allows to restore deleted or modified built-in Security Roles, Business Rules, and Property Patterns. See Restoring Built-In Security Roles, Restoring Built-In Business Rules, Restoring Built-In Property Patterns, Restoring Built-In Scheduled Tasks.
Managing Service Administrators	Allows administrators of an Adaxes service to add or remove other service administrators. See Add/Remove Service Administrators.
Managing Client Sessions	Allows service administrators to view, ban and disconnect users connected to an Adaxes service. See Manage Client Sessions.
Modifying Service Mail Settings	Allows service administrators to specify the outgoing mail settings, used by an Adaxes service when sending email messages. See Change Service Mail Settings.
Performance Counters	Allows monitoring the performance-related parameters of an Adaxes service using the system Performance Monitor (perfmon.exe).
Checking for Updates	Allows to check the product web site on whether updates of Softerra Adaxes are available. See Check For Updates.

	Note
	The features from the table above are provided by Service Administration Console only.