Set Default Account Options for New Users

Adaxes lets you specify what user account options are set by default when creating new AD users. For example, you may want the 'Account is disabled' or 'User cannot change password' options to be always enabled by default for new Active Directory user accounts. If a new user is created using the User Creation wizard, Adaxes will automatically enable the specified account options on the wizard pages. If a user is created using PowerShell, ADSI script or during data import, and the Account Options (userAccountControl) property is not set, the default account options will be used.

To specify default account options for new AD users, you need to create a Property Pattern for the User object type and specify the default value for the Account Options property.

Launch Adaxes Administration Console, right-click your Adaxes service, point to New and click Property Pattern. The Create Property Pattern wizard will open.

Enter the name for the new Property Pattern and click Next.

Here you need to select the AD object type, properties of which the new Property Pattern will affect. As we want to specify a default value for the Account Options property of user objects, select User in the Object Type list and click Next.

At the Configure Property Pattern page you can specify default values and formatting constraints for the AD properties you need. Click Add and select the Account Options property in the drop-down list.

In the Add Property Pattern Item dialog, click the Edit button embedded in the Generate default value field and select account options you want to be set by default. Click OK.

When finished, click OK and then click Next.

Here, at the Activity Scope page you need to specify where in Active directory a user must be created to be affected by the Property Pattern. Click Add.

In the Property Pattern Activity Scope dialog that opens, select one of the following items:

• All Objects - select if you want this Property Pattern to be effective when creating a user in any AD domain managed by the Adaxes service.
  
  
• Specific Domain - select if you want this Property Pattern to be effective when creating a user in the AD domain you specify.
  
  
• OU or Container - select if you want this Property Pattern to be effective when creating a user under the selected OU or container.
  
  

Select the item you need and click Add. When finished, click OK.

The specified activity scope items will be displayed in the Assignments list. Click Finish.