Active Directory management & automation

Configure the Active Directory Pane

The Active Directory pane located on the Home page of the Active Directory Web Interface can be configured to display either managed Active Directory domains or specific Active Directory objects. The latter option enables users to access objects located deeply in the Active Directory structure without having access to the structure itself.


For example, to allow users to subscribe and unsubscribe from specific distribution lists by themselves, you can configure the Active Directory pane to display the distribution lists you need in the Web Interface for self-service. In this case, users will be able to access these objects, even if they don't have permissions to view their parent Organizational Units or containers. Users won't even have to know where in the Active Directory the distribution lists are located.

For details on how to disallow users to view the Active Directory structure, see Hide Active Directory Objects from Users.

Also, the Active Directory pane can significantly speed up users' access to frequently used Active Directory objects, as all objects they need are placed right on the Home page.

If a user doesn't have rights to view an Active Directory object, this object will not be displayed in the Active Directory pane for this user.

In this tutorial, you will learn how to customize the Active Directory pane to display specific Active Directory objects and how to organize the objects located in the Active Directory pane into groups.

On the computer, where the Web Interface is installed, start the Web Interface Customization tool.


In the Interface type drop-down list, select the Web Interface you want to configure.



Activate the General tab and click Configure Active Directory Pane.



Select the Show the following Active Directory objects option.

To add an object to the Active Directory pane, do the following:
  • Click the Add button located on the right side of the dialog.
  • Specify the DN (Distinguished Name) of the Active Directory object you want to add.
  • Click OK.
To get the DN of an Active Directory object:
  • Launch the Adaxes Administration Console.
  • Right-click the object you need.
  • In the context menu, open the submenu of the Copy item.
  • Click Copy DN. The DN of the selected Active Directory object will be copied to the clipboard.
The Active Directory pane can also display Business Units and Active Directory domains. You can get the DN of a Business Unit or managed Active Directory domain in the same way as you get DNs of Active Directory objects.

The objects located in the Active Directory pane can be organized into groups.


To add a group to the Active Directory pane, do the following:
  • Click the Add Group button located on the right side of the dialog.
  • Type a name for the group.
  • Press Enter.
To add an object to the group:
  • Select the group.
  • Click the Add button located on the right side of the dialog.
  • Specify the DN (Distinguished Name) of the Active Directory object you want to add.
  • Click OK.
Groups and objects within a group are displayed according to their order in the list. To change the order of groups and objects, use Move Up and Move Down buttons.

When finished, click Apply.
There is no need to restart IIS to apply the changes, as the changes are applied automatically.