Active Directory management & automation

Set Default Account Options for New Users

Adaxes lets you specify what user account options are set by default when creating new users in Active Directory. For example, you may want the Account is disabled or User cannot change password options to be always enabled by default for new user accounts. If a new user is created using the User Creation wizard, Adaxes will automatically enable the specified account options on the wizard pages. If a user is created using PowerShell, ADSI script or during data import, and the Account Options (userAccountControl) property is not set, the default account options will be used.

Default values for AD object properties are specified via Property Patterns. To specify default account options for all new users, you need to modify the built-in Property Pattern for user accounts called User Pattern. To do this:

Launch Adaxes Administration Console, expand
Adaxes service \ Configuration \ Property Patterns \ Builtin and select User Pattern.

Click Add at the top right corner of the Result Pane (located on the right), and then select Account Options.

The Account Options dialog opens.

Select account options you want to be set by default.

When finished, click OK.

Click Save changes.

If you want to specify default account options only for users created in a certain location, like an Organizational Unit for temporary hires, you can create a separate Property Pattern to specify default account options for that particular location.

How

Launch Adaxes Administration Console, right-click your Adaxes service, point to New and click Property Pattern. The Create Property Pattern wizard will open.

Enter the name for the new Property Pattern and click Next.

Here, you need to select the AD object type, properties of which the new Property Pattern will affect. As we want to specify default account options for users, select User in the Object Type list and click Next.

At the Configure Property Pattern page, you need to specify default values and formatting constraints for the AD properties you need. Click Add and select Account Options in the drop-down list. This will bring up the Account Options dialog.

Select account options you want to be set by default.

When finished, click OK, and then click Next.

Here, at the Activity Scope page, you need to specify in which part of your Active Directory the Property Pattern will apply the default account options. Click Add.

In the Property Pattern Activity Scope dialog, select one of the following items:

  • All Objects - select if you want to apply the default account options when creating a user in any AD domain managed by Adaxes service.

  • Specific Domain - select if you want the apply the default account options when creating a user in the AD domain you specify.

  • OU or Container - select if you want the apply the default account options when creating a user under the selected OU or container.

Select the item you need and click Add. When finished, click OK.

The specified activity scope items will be displayed in the Assignments list. Click Finish.
? Waiting

Progress status: Checking...