Active Directory management & automation

Tutorials

Configure Home Page Actions

The Adaxes Active Directory Web Interface can be configured to allow users to launch frequently used operations right from the Home page in a single mouse click. The links for performing the operations are displayed in the Actions pane.


The Actions pane can be configured to allow users to perform practically any operation on Active Directory objects including creating new objects, managing existing objects, performing Custom Commands, Exchange operations, etc. To integrate various applications used in your company with Adaxes Web Interface, the Actions pane can contain links to external websites.

Each operation available on the Home page can be configured to minimize steps necessary for its execution, thus simplifying the user interface and minimizing the risk that users will do something wrong. For example, you can add the Create Sales User command to the Actions pane and specify the Organizational Unit, where new users will be created, customize the user creation form for this command, and define the default values for some user properties. In such a way, when users click the Create Sales User link, they will not be offered to select the target Organizational Unit (and thus will never create a user in a wrong OU) and will be able to fill in only the fields you defined for the creation form. The rest of the fields will be set automatically (e.g. the Department will always be set to 'Sales').

To allow users to execute a specific operation only from the Actions pane, you need to disable this operation for the rest of the Web Interface components. For details, see Disallow Certain Operations on Active Directory Objects.

In this tutorial, you will learn how to configure the Home page of the Web Interface to contain links for performing various operations on Active Directory objects.

On the computer, where the Web Interface is installed, start the Web Interface Customization tool.


In the Interface type drop-down list, select the Web Interface that you want to configure.



Activate the General tab, select the Actions pane option, and click Configure Home Page Actions.


In the Home Page Actions dialog, you will see all the actions available on the Actions pane.



To make an action or a whole group of actions temporarily unavailable (without actually removing it), uncheck this action or group in the list. Unchecked actions are not displayed in the Actions pane.



To permanently delete an action or a group of actions, select it and click Delete.


To add a new action to the Actions pane, click the Add button located at the bottom of the Home Page Actions dialog.

The actions contained in the Actions pane can be organized into groups.

To add a group to the Actions pane, do the following:
  • Click the Add Group button located at the bottom of the dialog.
  • Type a name for the group.
  • Press Enter.

To add an action to the group:
  • Select the group.
  • Click the Add button located at the bottom of the dialog.

The Add Home Page Action wizard will start. At the first wizard step, select the action you want to add:

Create New Object

Select the Create New action and choose the type of objects to be created using the new action. Click Next.


Provide the name, a brief description, and a confirmation text for the new action. Click Next.
If you don't want any confirmation to be displayed, leave the Confirmation field blank.

When the action is initiated, users will need to choose where in Active Directory the new object will be created. You can configure options for choosing the location (Organizational Unit or other container) for new objects.

If you want users to be able to create new objects only in a specific OU or in an OU located under that specific OU, do the following:
  • Select the Allow selecting only containers/OUs located under option.
  • Specify the Distinguished name (DN) of the OU or container you need in the Container DN edit box.

How to get the DN of an object

To get the DN of an Active Directory object:
  • Launch the Adaxes Administration Console.
  • Right-click the object you need.
  • In the context menu, open the submenu of the Copy item.
  • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
If you want users to be able to create new objects only in the containers/OUs located under the specified container/OU and not in that container/OU itself, enable the Disallow selecting this OU/container option.
If you want a specific Organizational Unit or container to be pre-selected by default, do the following:
  • Enable the Select specific AD container or OU by default option.
  • In the Container DN edit box, specify the DN (Distinguished Name) of the OU or container that you want to be selected by default.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
If you don't want users to be able to select the location for new objects, enable the Always use this OU/container option. In this case, the container or Organizational Unit specified in the Container DN edit box will always be selected automatically, and users won't be able to select another one.
It is recommended to configure the action to always create new objects in one and the same OU or container and define a Business Rule that will automatically move newly created objects to the appropriate location based on specific rules. For details, see Move Newly Created Users to a Specific OU.
If you want users to be able to select only Organizational Units, when selecting the location for new objects, enable the Allow selecting only OUs option. In this case, other Active Directory containers will not be displayed to users.
You can allow users to choose only Organizational Units or containers that match an LDAP filter. For example, if you want new objects to be created only in Organizational Units that contain the word 'Department' in their names, you can use the following LDAP filter: (&(objectCategory=organizationalUnit)(name=*Department*)).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: (managedBy=%distinguishedName%), the %distinguishedName% value reference will be replaced with the value of the Distinguished Name property of the user initiating the action. So, the user who initiates the action will be able to create a new object only in the Organizational Units or containers managed by that user.

To select a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available target containers/OUs by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Next.

At this step, you can customize the form used to create objects with the help of the new action.

A good practice is to allow users to fill in only the minimum required fields and define default values for the rest of the fields in accordance to the specifics of the operation. For example, if the new action will be used to create user accounts for employees of the Sales department, the creation form can contain only Full Name, Title, Logon Name, and Password fields. The properties specific for the Sales department, will be set automatically without the user's involvement. For example, Department will always be set to 'Sales'.

To customize the form that will be used to create new objects, do the following:
  • Select the Use customized form option.
  • Click Customize Form.
  • Modify the form to fit your needs and click OK.
For details on how to customize forms, see Customize Forms for User Creation and Editing (starting from Step 6).
To specify default property values for the new object, do the following:
  • Click the Add button located in the Predefined Fields group box.
  • Choose the property, for which you want to define the default value.
  • Enter the desired value.
  • Click OK.

You can use value references in default property values.

Using value references in default property values

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the %distinguishedName% value reference for the Manager property, it will be replaced with the value of the Distinguished Name property of the user initiating the action. So, the initiator of the action will be set in the Manager field by default.



To select a value reference, click the button at the right side of the Default Value edit box.
If you specified the default value for a property and there is a Property Pattern that also defines the default value for this very property, the value defined by the Property Pattern will be ignored. For details on how to specify default property values with the help of Property Patterns, see Auto-Populate the Company Name When Creating Users.
When finished, click Finish.

Modify Object

Select the Modify action and choose the type of objects you want to be modified using the new action. Click Next.


Provide the name, a brief description, and a confirmation text for the new action. Click Next.
If you don't want any confirmation to be displayed, leave the Confirmation field blank.

When the action is initiated, users will need to select the object they want to modify. At this wizard step, you can configure how users will select the desired object.

If you want the action to be always performed on the account of the user who initiated it, select the Always perform for the current user option. In this case, users will be able to edit only properties of their own accounts using the new action.
This option is only available, if you've selected the User object type on the first step of the wizard.

If you want users to be able to perform the action on Active Directory objects located under a specific container or Organizational Unit only, do the following:
  • Select the Allow selecting only AD objects located under a specific OU or container option.
  • Specify the DN (Distinguished Name) of the OU or container you need in the Container DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
You can allow users to perform the action only on Active Directory objects that match a specific LDAP filter. For example, if you want to allow users to perform the action only on objects that contain the word 'Sales' in their names, you can use the following LDAP filter: (name=*Sales*).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following:(department=%department%), the %department% value reference in the LDAP filter will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose Department is Sales initiates the action, he/she will be able to modify only the AD objects whose Department property value is also Sales.

To insert a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available AD objects by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Next.

At this step, you can customize the form that will be used to modify objects with the help of the new action.

You can configure the form to enable users to modify only specific properties of the selected object. For some of the properties, you can define default values in accordance to the specifics of the operation.

To customize the form that will be used to modify objects, do the following:
  • Select the Use customized form option.
  • Click Customize Form.
  • Modify the form to fit your needs and click OK.
For details on how to customize forms, see Customize Forms for User Creation and Editing (starting from Step 6).
To specify the default values for some of the object properties, do the following:
  • Click the Add button located in the Predefined Fields group box.
  • Choose the property, for which you want to define the default value.
  • Enter the value you want.
  • Click OK.


You can use value references in default property values.

Using value references in default property values

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the %distinguishedName% value reference for the Manager property, it will be replaced with the value of the Distinguished Name property of the user initiating the action. So, the initiator of the action will be set in the Manager field by default.



To select a value reference, click the button at the right side of the Default Value edit box.
When finished, click Finish.

Copy Object

Select the Copy action and choose the type of objects to be copied using the new action. Click Next.


Provide the name, a brief description, and a confirmation text for the new action. Click Next.
If you don't want any confirmation to be displayed, leave the Confirmation field blank.

When the action is initiated, the user will need to select the object to copy. At this wizard step, you can configure options for selecting the desired object.

If you want to configure the action to always copy the account of the user who initiated it, enable the Always copy the account of the currently logged on user option.
This option is only available, if you've selected the User object type at the first step of the wizard.
If you want to configure the action to always copy a specific AD object, enable the Always copy a specific AD object option. In the Object DN edit box, type the Distinguished Name (DN) of the object to be copied.

How to get the DN of an object

To get the DN of an Active Directory object:
  • Launch the Adaxes Administration Console.
  • Right-click the object you need.
  • In the context menu, open the submenu of the Copy item.
  • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the object DN.

Using value references in the object DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: CN=_usertemplate,OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Object DN will be set to CN=_usertemplate,OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.

If you want users to be able to copy Active Directory objects located under a specific container or Organizational Unit only, do the following:
  • Select the Allow selecting only AD objects located under a specific OU or container option.
  • Specify the DN (Distinguished Name) of the OU or container you need in the Container DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.

You can allow users to copy only the objects that match a specific LDAP filter. For example, if you want to allow users to copy objects that contain the word 'template' in their names, you can use the following LDAP filter: (name=*template*). To specify the LDAP filter for object selection, enable the Allow selecting only AD objects that match the specific LDAP filter option and type the filter you need in the LDAP filter edit box.

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: (department=%department%), the %department% value reference in the LDAP filter will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose Department is Sales initiates the action, the LDAP filter will be set to (department=Sales).

To insert a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available AD objects by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Next.

After the object to copy is selected, the user will need to choose the target Organizational Unit or container where the object will be copied. At this wizard step, you can configure how users will select the target location for copying objects.

If you want users to be able to copy objects only to a specific OU or an OU located under that specific OU, do the following:
  • Select the Allow selecting only containers/OUs located under option.
  • Specify the Distinguished name (DN) of the OU or container you need in the Container DN edit box.

How to get the DN of an object

To get the DN of an Active Directory object:
  • Launch the Adaxes Administration Console.
  • Right-click the object you need.
  • In the context menu, open the submenu of the Copy item.
  • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
If you want users to be able to copy objects to the containers/OUs located under the specified container/OU and not to that container/OU itself, enable the Disallow selecting this OU/container option.


If you want a specific Organizational Unit or container to be pre-selected by default, do the following:
  • Enable the Select specific AD container or OU by default option.
  • In the Container DN edit box, specify the DN (Distinguished Name) of the OU or container that you want to be selected by default.

How to get the DN of an object

To get the DN of an Active Directory object:
  • Launch the Adaxes Administration Console.
  • Right-click the object you need.
  • In the context menu, open the submenu of the Copy item.
  • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
If you don't want users to be able to select the location for copying objects, enable the Always use this OU/container option. If this option is enabled, the container or Organizational Unit specified in the Container DN edit box will always be selected automatically, and users will not be allowed to select another one.


If you want users to be able to select only Organizational Units, when selecting the target container for copying objects, enable the Allow selecting only OUs option. If this option is enabled, other Active Directory containers will not be displayed to users.

You can allow users to choose only Organizational Units or containers that match an LDAP filter. For example, if you want users to be able to copy objects only to the Organizational Units that contain the word 'Department' in their names, you can use the following LDAP filter: (&(objectCategory=organizationalUnit)(name=*Department*)).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: (managedBy=%distinguishedName%), the %distinguishedName% value reference will be replaced with the value of the Distinguished Name property of the user initiating the action. So, the user who initiates the action will be able to copy objects only to the Organizational Units or containers managed by that user.

To select a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available target containers/OUs by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Next.

At this step, you can customize the form used to create objects with the help of the new action.
  • Select the Use customized form option.
  • Click Customize Form.
  • Modify the form to fit your needs and click OK.
For details on how to customize forms, see Customize Forms for User Creation and Editing (starting from Step 6).
To specify default property values for the new object, do the following:
  • Click the Add button located in the Predefined Fields group box.
  • Choose the property, for which you want to define the default value.
  • Enter the desired value.
  • Click OK.

You can use value references in default property values.

Using value references in default property values

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the %distinguishedName% value reference for the Manager property, it will be replaced with the value of the Distinguished Name property of the user initiating the action. So, the initiator of the action will be set in the Manager field by default.



To select a value reference, click the button at the right side of the Default Value edit box.
When finished, click Finish.

View Object

Select the View object action and choose the type of AD objects you want to allow viewing with the help of the new action. Click Next.

Provide the name and brief description text for the new action. Click Next.

After the action is initiated, users will need to select the Active Directory object they want to view. At this wizard step, you can configure options for object selection.

If you want to configure the action to display the properties of the account of the user who initiated it, enable the Always view properties of the currently logged on user. If this option is enabled, the new action will allow users to view properties of their own user account only.
This option is only available, if you've selected the User object type on the first step of the wizard.

If you want to allow users to view properties of a specific AD object only, enable the Always view properties of a specific AD object option. In the Object DN edit box, type the Distinguished Name (DN) of the object. If the option is enabled, users will not be able to select another object to view.

How to get the DN of an object

To get the DN of an Active Directory object:
  • Launch the Adaxes Administration Console.
  • Right-click the object you need.
  • In the context menu, open the submenu of the Copy item.
  • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the object DN.

Using value references in the object DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: CN=MyUser,OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Object DN will be set to CN=MyUser,OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Object DN edit box.

If you want to allow users to select AD objects they want to view, enable the Allow users to select the object to view option.

If you want users to be able to view Active Directory objects located under a specific container or Organizational Unit only, do the following:
  • Select the Allow selecting only AD objects located under a specific OU or container option.
  • Specify the DN (Distinguished Name) of the OU or container you need in the Container DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
You can configure the action to allow users to view only the Active Directory objects that match a specific LDAP filter. For example, if you want users to be able to view only the objects, the Department property of which is set to 'Sales', you can use the following LDAP filter: (department=Sales).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following:(department=%department%), the %department% value reference in the LDAP filter will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose Department is Sales initiates the action, he/she will be able to select only the AD objects whose Department property value is also Sales.

To insert a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available AD objects by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Next.

At this wizard step, you can customize the view that will be used to display properties of the selected object.

To customize the view:
  • Select the Use customized form option.
  • Click Customize Form.
  • Modify the view the way you need and click OK.
For details on how to customize forms, see Customize Forms for User Creation and Editing (starting from Step 6).
When finished, click Finish.

Reset/Change Password

Select the Reset Password or Change Password action and click Next.
The Change Password operation requires that the person who changes the password knows the user's current password. The Reset Password operation doesn't require knowledge of the current password and is usually performed by administrators and Help Desk staff to handle lost/forgotten passwords.

Provide the name, a brief description, a and confirmation text for the new action. Click Next.
If you don't want any confirmation to be displayed, leave the Confirmation field blank.

After the Reset Password operation is initiated, users will need to select the user accounts, for which they want to reset the password. At this wizard step, you can configure, which accounts users will be able to select.
This wizard step is skipped, if you've selected the Change Password action at the first wizard step, because the Change Password operation can be performed only for the user who initiated it.
If you want to allow users to reset passwords in bulk, select the Allow multiple selection option.


If you want users to be able to perform the action on user accounts located under a specific container or Organizational Unit only, do the following:
  • Select the Allow selecting only AD objects located under a specific OU or container option.
  • Specify the DN (Distinguished Name) of the OU or container you need in the Container DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
You can allow users to reset passwords only for user accounts that match a specific LDAP filter. For example, if you want the new action to be performed only on users from the Sales department, you can use the following LDAP filter: (department=Sales).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following:(department=%department%), the %department% value reference in the LDAP filter will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose Department is Sales initiates the action, he/she will be able to select only those user accounts whose Department property value is also Sales.

To insert a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available AD objects by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Finish.

Enable/Disable/Unlock Account

Select the Enable Account, Disable Account or Unlock Account action and click Next.


Provide the name, a brief description, and a confirmation text for the new action. Click Next.
If you don't want any confirmation to be displayed, leave the Confirmation field blank.

After the operation is initiated, users will need to select the accounts they want to enable/disable/unlock. At this wizard step, you can configure options for the selection of the accounts.
Despite any settings, users will be able to select only those accounts, on which the operation can be performed. For example, for the Unlock Account operation, only locked out accounts will be available.
If you want to allow users to enable/disable/unlock multiple accounts in one operation, select the Allow multiple selection option.


If you want users to be able to perform the action only on the accounts located under a specific container or Organizational Unit, do the following:
  • Select the Allow selecting only AD objects located under a specific OU or container option.
  • Specify the DN (Distinguished Name) of the OU or container you need in the Container DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
The Enable Account and Disable Account operations can be performed on User and Computer objects. To allow users to perform the operation only on the objects of a specific type, do the following:
  • Select the Allow selecting only AD objects of specific types option.
  • In the list below, check the object type you need.
You can allow users to enable/disable/unlock only accounts that match a specific LDAP filter. For example, if you want the operation to be performed only on the accounts, the Department property of which is set to 'Sales', you can use the following LDAP filter: (department=Sales).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following:(department=%department%), the %department% value reference in the LDAP filter will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose Department is Sales initiates the action, he/she will be able to select only those user accounts whose Department property value is also Sales.

To insert a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available AD objects by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Finish.

Move

Select the Move action and click Next.


Provide the name, a brief description, and a confirmation text for the new action. Click Next.
If you don't want any confirmation to be displayed, leave the Confirmation field blank.

After the operation is initiated, users will need to select the Active Directory objects they want to move. At this wizard step, you can configure options for the selection of the objects.

If you want the action to be always performed on the account of the user who initiated it, select the Always perform for the current user option. In this case, the new action will allow users to move only their own user account.


If you want to allow users to move multiple Active Directory objects in one operation, select the Allow multiple selection option.


If you want the new action to allow users to move only the Active Directory objects located under a specific container or Organizational Unit, do the following:
  • Select the Allow selecting only AD objects located under a specific OU or container option.
  • Specify the DN (Distinguished Name) of the OU or container you need in the Container DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
To allow users to move only on the Active Directory objects of specific types, do the following:
  • Select the Allow selecting only AD objects of specific types option.
  • In the list below, check the object types you need.
You can configure the action to allow users to move only the Active Directory objects that match a specific LDAP filter. For example, if you want the operation to be performed only on the objects, the Department property of which is set to 'Sales', you can use the following LDAP filter: (department=Sales).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following:(department=%department%), the %department% value reference in the LDAP filter will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose Department is Sales initiates the action, he/she will be able to select only the AD objects whose Department property value is also Sales.

To insert a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available AD objects by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Next.

After the objects to move are selected, the user will need to choose the target Organizational Unit or container where the selected objects will be moved. At this wizard step, you can configure options for choosing the target location for the selected objects.

If you want users to be able to move objects only to a specific OU or in an OU located under that specific OU, do the following:
  • Select the Allow selecting only containers/OUs located under option.
  • Specify the Distinguished name (DN) of the OU or container you need in the Container DN edit box.

How to get the DN of an object

To get the DN of an Active Directory object:
  • Launch the Adaxes Administration Console.
  • Right-click the object you need.
  • In the context menu, open the submenu of the Copy item.
  • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
If you want users to be able to move objects only to the containers/OUs located under the specified container/OU and not to that container/OU itself, enable the Disallow selecting this OU/container option.

If you want a specific Organizational Unit or container to be pre-selected by default, do the following:
  • Enable the Select specific AD container or OU by default option.
  • In the Container DN edit box, specify the DN (Distinguished Name) of the OU or container that you want to be selected by default.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
If you don't want users to be able to select the target OU or container, enable the Always use this OU/container option. In this case, the selected objects will always be moved to the container or Organizational Unit specified in the ContainerDN edit box, and users won't be able to select another one.


If you want users to be able to select only Organizational Units when selecting the target location, enable the Allow selecting only OUs option. In this case, other Active Directory containers will not be displayed to users.
You can allow users to choose only Organizational Units or containers that match a specific LDAP filter. For example, if you want to allow users to move the selected objects only to the Organizational Units that contain the word 'Department' in their names, you can use the following LDAP filter: (&(objectCategory=organizationalUnit)(name=*Department*)).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: (managedBy=%distinguishedName%), the %distinguishedName% value reference will be replaced with the value of the Distinguished Name property of the user initiating the action. So, the user who initiates the action will be able to create a new object only in the Organizational Units or containers managed by that user.

To select a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available target containers/OUs by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Finish.

Add to Group

Select the Add to Group action and click Next.


Provide the name, a brief description, and a confirmation text for the new action. Click Next.
If you don't want any confirmation to be displayed, leave the Confirmation field blank.

After the operation is initiated, users will need to select the Active Directory objects they want to add to groups. At this wizard step, you can configure options for the selection of the objects.

If you want the new action to allow users to add to groups their own user account only, select the Always perform for the current user option. In this case, users will not be offered to select the objects, on which to perform the operation (the account of the user who initiated the operation will always be selected automatically).


If you want to allow users to add multiple Active Directory objects to groups in one operation, select the Allow multiple selection option.


If you want the new action to allow users to add to groups only the Active Directory objects located under a specific container or Organizational Unit, do the following:
  • Select the Allow selecting only AD objects located under a specific OU or container option.
  • Specify the DN (Distinguished Name) of the OU or container you need in the Container DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
To configure the new action to allow users to add to groups only specific types of Active Directory objects, do the following:
  • Select the Allow selecting only AD objects of specific types option.
  • In the list below, check the object types you need.
You can configure the action to allow users to add to groups only the Active Directory objects that match a specific LDAP filter. For example, if you want the operation to be performed only on the objects whose Department property is set to 'Sales', you can use the following LDAP filter: (department=Sales).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service, and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following:(department=%department%), the %department% value reference in the LDAP filter will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose Department is Sales initiates the action, he/she will be able to select only the AD objects whose Department property value is also Sales.

To insert a value reference, click the button at the right side of the LDAP filter edit box.

If you want to customize the action not to display the list of all available AD objects by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Next.

After users have selected the Active Directory objects they want to add to groups, they will need to select the groups to which the selected objects will be added. At this wizard step, you can configure options for the selection of the groups.

You can configure the action to allow users to add the selected objects to a specific group only. In this case, the selected objects will always be added to the group you specify and users will not be able to select other groups. To allow users to add the selected objects to a specific group only, do the following:
  • Select the Always modify membership of the specified group option.
  • Specify the DN (Distinguished Name) of the group you need in the Group DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the group DN.

Using value references in the group DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user initiating the action. For example, if you specify the following: CN=Managers,OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, a user whose department is Sales will be able to add members to the group with the following DN: CN=Managers,OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Group DN edit box.

If you want to allow users to add the selected objects to multiple groups in one operation, select the Allow multiple selection option.


If you want the new action to allow users to add the selected objects only to the groups located under a specific container or Organizational Unit, do the following:
  • Select the Allow selecting only groups located under a specific OU or container option.
  • Specify the DN (Distinguished Name) of the OU or container you need in the Container DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, initiating the action. So, a user whose department is Sales will be able to select only groups located under the OU with the following DN: OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
You can configure the new action to allow users to add the selected objects only to the groups of specific types (e.g. only to the Global Distribution groups). To specify the desired group types, do the following:
  • Select the Allow selecting only groups of specific types option.
  • Specify the desired group type and scope using the options below.

You can configure the action to allow users to add the selected objects only to the groups that match a specific LDAP filter. For example, if you want the objects to be added only to the groups that contain the word 'Staff' in their names, you can use the following LDAP filter: (name=*Staff*).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following:(name=*%department%*), the %department% value reference in the LDAP filter will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose Department is Sales initiates the action, he/she will be able to select only the AD groups that contain 'Sales' in their name.

To insert a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available AD objects by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.


When finished, click Finish.

Remove from Group

Select the Remove from Group action and click Next.


Provide the name, brief description and confirmation text for the new action. Click Next.
If you don't want any confirmation to be displayed, leave the Confirmation field blank.

After the operation is initiated, users will need to select the Active Directory objects they want to remove from groups. At this wizard step, you can configure options for the selection of the objects.

If you want the new action to allow users to remove from groups their own user account only, select the Always perform for the current user option. In this case, users will not be offered to select the objects on which to perform the operation (the account of the user who initiated the operation will always be selected automatically).


If you want to allow users to remove multiple Active Directory objects from groups in one operation, select the Allow multiple selection option.


If you want the new action to allow users to remove from groups only the Active Directory objects located under a specific container or Organizational Unit, do the following:
  • Select the Allow selecting only AD objects located under a specific OU or container option.
  • Specify the DN (Distinguished Name) of the OU or container you need in the Container DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
To configure the new action to allow users to remove from groups only specific types of Active Directory objects, do the following:
  • Select the Allow selecting only AD objects of specific types option.
  • In the list below, check the object types you need.
You can configure the action to allow users to remove from groups only the Active Directory objects that match a specific LDAP filter. For example, if you want the operation to be performed only on the objects whose Department property is set to 'Sales', you can use the following LDAP filter: (department=Sales).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following:(department=%department%), the %department% value reference in the LDAP filter will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose Department is Sales initiates the action, he/she will be able to select only the AD objects whose Department property value is also Sales.

To insert a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available AD objects by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Next.


After users have selected the Active Directory objects they want to remove from groups, they will need to select the groups from which the selected objects will be removed. At this wizard step, you can configure options for the selection of the groups.

You can configure the action to allow users to remove the selected objects from a specific group only. In this case, the selected objects will always be removed from the group you specify and users will not be able to select other groups. To allow users to remove the selected objects from a specific group only, do the following:
  • Select the Always modify membership of the specified group option.
  • Specify the DN (Distinguished Name) of the group you need in the Group DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the group DN.

Using value references in the group DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user initiating the action. For example, if you specify the following: CN=Managers,OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user initiating the action. So, a user whose department is Sales will be able to remove members from the group with the following DN: CN=Managers,OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Group DN edit box.

If you want to allow users to remove the selected objects from multiple groups in one operation, select the Allow multiple selection option.


If you want the new action to allow users to remove the selected objects only from the groups located under a specific container or Organizational Unit, do the following:
  • Select the Allow selecting only groups located under a specific OU or container option.
  • Specify the DN (Distinguished Name) of the OU or container you need in the Container DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, initiating the action. So, a user whose department is Sales will be able to select only groups located under the OU with the following DN: OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
You can configure the new action to allow users to remove the selected objects only from the groups of specific types (e.g. only from the Global Distribution groups). To specify the desired group types, do the following:
  • Select the Allow selecting only groups of specific types option.
  • Specify the group type and scope you need using the options below.
You can configure the action to allow users to remove the selected objects only from the groups that match a specific LDAP filter. For example, if you want the objects to be removed only from the groups that contain the word 'Staff' in their names, you can use the following LDAP filter: (name=*Staff*).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: (name=*%department%*), the %department% value reference in the LDAP filter will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose Department is Sales initiates the action, he/she will be able to select only the groups that contain 'Sales' in their name.

To insert a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available target groups by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Finish.

Manage Group Membership

Select the Manage Group Membership action and click Next.
The Manage Group Membership action allows users to add/remove members from a specific group.

Provide the name, brief description and confirmation text for the new action. Click Next.
If you don't want any confirmation to be displayed, leave the Confirmation field blank.

After the operation is initiated, users will need to select the group, members of which they want to change. At this wizard step, you can configure options for the selection of the group.

If you want the new action to allow users to add/remove members only from the groups located under a specific container or Organizational Unit, do the following:
  • Select the Allow selecting only AD objects located under a specific OU or container option.
  • Specify the DN (Distinguished Name) of the OU or container you need in the Container DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
You can configure the action to allow users to add/remove members only for the groups that match a specific LDAP filter. For example, if you want to allow changing the membership only for the groups that contain the word 'Staff' in their names, you can use the following LDAP filter: (name=*Staff*).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following:(name=*%department%*), the %department% value reference in the LDAP filter will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose Department is Sales initiates the action, he/she will be able to select only the groups that contain 'Sales' in their name.

To insert a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available target groups by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Finish.

Delete

Select the Delete action and click Next.
The Delete operation permanently deletes objects from Active Directory. It is NOT recommended to permanently delete user accounts from the directory. The Deprovision Custom Command should be used instead. For more details, see Configure User Deprovisioning.
Provide the name, brief description and confirmation text for the new action. Click Next.
If you don't want any confirmation to be displayed, leave the Confirmation field blank.

After the operation is initiated, users will need to select the Active Directory objects they want to delete. At this wizard step, you can configure options for the selection of the objects.

If you want to allow users to delete multiple Active Directory objects in one operation, select the Allow multiple selection option.


If you want the new action to allow users to delete only the Active Directory objects located under a specific container or Organizational Unit, do the following:
  • Select the Allow selecting only AD objects located under a specific OU or container option.
  • Specify the DN (Distinguished Name) of the OU or container you need in the Container DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
To configure the new action to allow users to delete only specific types of Active Directory objects, do the following:
  • Select the Allow selecting only AD objects of specific types option.
  • In the list below, check the object types you need.
You can configure the action to allow users to delete only the Active Directory objects that match a specific LDAP filter. For example, if you want the operation to be performed only on the objects that contain the word 'Deprovisioned' in their names, you can use the following LDAP filter: (name=*Deprovisioned*).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following:(department=%department%), the %department% value reference in the LDAP filter will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose Department is Sales initiates the action, he/she will be able to delete only the AD objects whose Department property value is also Sales.

To insert a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available AD objects by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Finish.

Create Exchange Mailbox

Select the Create Exchange Mailbox action and click Next.
Adaxes supports Exchange 2003, 2007, 2010, and 2013.

Provide the name, brief description and confirmation text for the new action. Click Next.
If you don't want any confirmation to be displayed, leave the Confirmation field blank.

After the operation is initiated, users will need to select the user accounts for which they want to create Exchange mailboxes. At this wizard step, you can configure options for the selection of user accounts.
Despite any settings, users will be able to select only accounts that don't have mailboxes in Exchange.
If you want to allow users to create Exchange mailboxes for multiple user accounts in one operation, select the Allow multiple selection option.


If you want the new action to allow users to create Exchange mailboxes only for the user accounts located under a specific container or Organizational Unit, do the following:
  • Select the Allow selecting only AD objects located under a specific OU or container option.
  • Specify the DN (Distinguished Name) of the OU or container you need in the Container DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
You can configure the action to allow users to create mailboxes only for the user accounts that match a specific LDAP filter. For example, if you want the operation to be performed only on the user accounts whose Department property is set to 'Sales', you can use the following LDAP filter: (department=Sales).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following:(department=%department%), the %department% value reference in the LDAP filter will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose Department is Sales initiates the action, he/she will be able to create mailboxes only for the users whose Department property value is also Sales.

To insert a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available AD objects by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Finish.

Send SMS

Select the Send SMS action and click Next.

Provide the name, brief description and confirmation text for the new action. Click Next.
If you don't want any confirmation to be displayed, leave the Confirmation field blank.

After the operation is initiated, users will need to select the SMS message recipients. At this wizard step, you can configure options for the selection of recipients.

If you want the new action to send SMS only to the user who initiates that action, enable the Always perform for the current user option. In this case, users will not be able to select the recipients to whom the SMS will be sent (the account of the user who initiated the operation will always be selected automatically).

If you want to allow users to send SMS messages to multiple recipients, select the Allow multiple selection option.


If you want the new action to allow users to send SMS messages only to users and contacts located under a specific container or Organizational Unit, do the following:
  • Select the Allow selecting only AD objects located under a specific OU or container option.
  • Specify the DN (Distinguished Name) of the OU or container you need in the Container DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
You can configure the action to allow users to send SMS messages only to users and contacts that match a specific LDAP filter. For example, if you want to allow SMS sending only to users accounts whose Department property is set to 'Sales', you can use the following LDAP filter: (department=Sales).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following:(department=%department%), the %department% value reference in the LDAP filter will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose Department is Sales initiates the action, he/she will be able to send SMS only to those users and contacts whose Department property value is also Sales.

To insert a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available AD objects by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Next.


At this step you can specify the default text for the SMS message.


You can use value references in the text (e.g. %name%, %department%). Before an SMS message is sent, value references are replaced with corresponding property values of the recipient. For example, if you specify the following template for the default message: 
Dear %name%, your account expires on %accountExpires%.
the recipient will receive a message like this: 
Dear John Smith, your account expires on 11/7/2011 5:00:00 PM.

If you don't want to allow users to edit the SMS message text, select the Always use the default text option.

When finished, click Finish.

Custom Command

Select the Custom Command option and choose the Custom Command you want to be executed by the new action. Click Next.

For details on how to create Custom Commands, see Create a Custom Command.

Provide the name, brief description and confirmation text for the new action. Click Next.
If you don't want any confirmation to be displayed, leave the Confirmation field blank.

After the operation is initiated, users will need to select the Active Directory objects on which they want to perform the Custom Command. At this wizard step, you can configure options for the selection of objects.

If you want the new action to allow users to perform the Custom Command on their own user account only, select the Always perform for the current user option. In this case, users will not be offered to select the objects on which to perform the Custom Command (the account of the user who initiated the operation will always be selected automatically).
This option is available only for Custom Commands that can be performed on the User object type.

If you want to allow users to perform the Custom Command on multiple Active Directory objects in one operation, select the Allow multiple selection option.


If you want the new action to allow users to perform the Custom Command only on the Active Directory objects located under a specific container or Organizational Unit, do the following:
  • Select the Allow selecting only AD objects located under a specific OU or container option.
  • Specify the DN (Distinguished Name) of the OU or container you need in the Container DN edit box.

    How to get the DN of an object

    To get the DN of an Active Directory object:
    • Launch the Adaxes Administration Console.
    • Right-click the object you need.
    • In the context menu, open the submenu of the Copy item.
    • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
You can insert value references (e.g. %department%) as a part of the container DN.

Using value references in the container DN

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following: OU=%department%,DC=company,DC=com, the %department% value reference will be replaced with the value of the Department property of the user, who initiates the action. So, when a user whose department is Sales initiates the action, the Container DN will be set to OU=Sales,DC=company,DC=com.

To select a value reference, click the button at the right side of the Container DN edit box.
You can configure the action to allow users to perform the Custom Command only the Active Directory objects that match a specific LDAP filter. For example, if you want the operation to be performed only on the objects whose Department property is set to 'Sales', you can use the following LDAP filter: (department=Sales).

How to construct an LDAP filter

To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:
  • Launch the Adaxes Administration Console.
  • Connect to your Adaxes service and click Find on the toolbar.
  • Activate the LDAP Search tab.
  • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.
You can insert value references (e.g. %department%) as a part of the LDAP filter.

Using value references in the LDAP filter

When the action is executed, value references will be substituted with corresponding property values of the account of the user who initiates the action. For example, if you specify the following:(department=%department%), the %department% value reference in the LDAP filter will be replaced with the value of the Department property of the user, who initiates the action. So, when a user, whose Department is Sales initiates the action, he/she will be able to select only the AD objects whose Department property value is also Sales.

To insert a value reference, click the button at the right side of the LDAP filter edit box.
If you want to customize the action not to display the list of all available AD objects by default, enable the Do not display available objects automatically option. If the option is enabled, the available objects will be displayed only after the user clicks the Click to display objects link.

When finished, click Finish.

Link to Specific URL

To add an external link on the Actions pane, do the following:
  • Select the Link to Specific URL option.
  • In the edit box, specify the URL of the link (e.g. http://www.adaxes.com/tutorials/).
  • In case you want the link to open in a new browser window, select the Open in new window option.
Click Next.

Provide the name, a brief description, and a confirmation text for the link. Click Finish.
If you don't want any confirmation to be displayed, leave the Confirmation field blank.

To configure the parameters of an existing action, select this action in the list and click the Edit button located at the bottom of the dialog. Modify the action parameters and click OK.


In the Actions pane, groups and actions within a group are displayed according to their order in the list. To change the order of an action or a group, select it, and use Move Up and Move Down buttons.


When finished, click Apply.
There is no need to restart IIS to apply the changes, as the changes are applied automatically.

Delegating Permissions

Hide Active Directory objects from users
Grant rights to create users
Grant rights to modify account options
Allow managers to manage their teams
Grant rights to modify AD group membership
Grant rights to reset passwords and unlock accounts
Grant rights to create and modify Business Units
Deny rights to delete users
Grant rights to execute Custom Commands
Grant rights to modify specific properties of AD objects
Grant rights to move users between OUs

Automating Daily Tasks

Automate user home directory creation
Relocate home directories after disabling users
Automatically add users to groups by department
Add users to a specific group when they are disabled
Automatically change group membership using scripts
Move newly created users to a specific OU
Request approval for user deletion
Run PowerShell script after creating a user
Automate Exchange mailbox creation for new users
Automate Exchange mailbox configuration
Schedule tasks for AD management
Automatically set profile path for Remote Desktop Services
Send e-mail on adding members to specific groups
Send initial password to newly created users via SMS
Delete inactive computers from Active Directory
Automatically deprovision inactive AD users

Simplifying Data Entry

Auto-populate the company name when creating users
Change template for auto-generating users' full name
Specify list of departments to avoid repetitive typing
Disallow specifying telephones without country code
Make Employee ID a required property & specify its format
Set default account options for creating users
Validate/modify user input using a script
Predefine selection of Exchange mailbox stores
Automatically set account expiration date for new users
Generate initial password on user creation
Automatically set users' address based on their office
Provide custom help and tips for AD object properties

Active Directory Management

View & manage AD objects collectively
Create a Custom Command
Rename multiple AD users with one operation
Reset passwords for multiple users
Import user accounts from a CSV file
Schedule import of users from a CSV file
Modify Remote Desktop Services settings in bulk
Update user account options in bulk
Update multiple AD objects using PowerShell
View AD operations performed via Adaxes
Manage Fine-Grained Password Policies
Configure user deprovisioning

Web Interface Customization

Set custom logo and colors
Customize forms for user creation and editing
Customize Sign-In page and logon name options
Prevent users from viewing the Active Directory structure
Allow/deny access to the Web Interface
Disallow certain operations on Active Directory objects
Customize the Home page
Configure Home page actions
Configure the Active Directory pane
Customize Active Directory search
Put a custom message on the Change Password form
Hide specific Active Directory reports
Disable specific Web Interface components
Select the AD object types to be displayed in the UI
Manage Active Directory objects of a custom type
Configure columns in Active Directory object lists
Allow using templates for user creation
Customize Help and Support links
Create additional Web Interface sites

Self-Service

Configure Password Self-Service
Autoenroll users for Self-Password Reset
Allow users to modify specific properties of their accounts