Active Directory management & automation

Customize Forms for User Creation and Editing

You can customize how Active Directory objects are displayed in the Active Directory Web Interface, and configure forms for their creation, modification and renaming. For example, you may want Help Desk operators to be able to enter only Name, Department and Title fields, when creating new users in Active Directory. Or, you may want to enable regular users to view and modify only their personal and business information.

Adaxes Web Interface allows you to customize pages/forms used to display, create, edit, and rename Active Directory objects of any type (Users, Groups, Contacts, etc.). For each object type, you can configure, which fields will be shown on the form, how these fields will be grouped, customize options for group membership management, etc.

In this tutorial, you will learn how to customize forms for creating and editing Active Directory users.

On the computer, where the Web Interface is installed, start the Web Interface Customization tool.


In the Interface type drop-down list, select the Web Interface that you want to configure.

Activate the AD Management tab and click Customize Forms and Views.

In the Object types list (located on the left), select the type of Active Directory objects, for which you want to customize view and forms. As we want to customize forms for User objects, select User.


To customize the page used to display User objects, activate the View tab.

Screenshot: Object View

To customize the form used to create new User objects, activate the Create tab.

Screenshot: Creation Form

To customize the form used to edit User objects, activate the Modify tab.

Screenshot: Modification Form

To customize the form used to rename User objects, activate the Rename tab. For example, you may want this form to allow users to modify some additional properties related to the object name (e.g. Display Name, First Name, Last Name, Logon Name).

Screenshot: Renaming Form

In the Web Interface, all fields presented on views and forms are grouped into sections. The form sections are displayed in the list above. The fields of the selected section are displayed in the list below.

To add or remove a field from a section:

  • Select the section in the list above.
  • To delete a field, select it in the Section fields list, and click Delete.
  • To add a new field, click the Add button located under the Section fields list.

To change the order of sections and fields, use Move Up and Move Down buttons.

If you want a section to be hidden by default, until the user clicks the Specify more information link, do the following:

  • Select the section you need and click Edit.

  • In the dialog that opens, select the Show this section only after the user clicked the Specify More Properties link check box.

  • Click OK.

When this option is enabled, the section will be hidden by default, and users will need to click the Specify more information link to display this section.

View screenshot

To add a new section, do the following:

  • Click the Add button located under the section list.

  • Enter the name for the new section in the Section name edit box.

  • In the Section description field, you can type an optional description for the section.

    The description will appear in the section header.

    View screenshot

  • Specify whether the new section must be hidden by default, until the user clicks the Specify more information link.

  • Click Next.
  • Select what kind of data the section will contain:

AD object properties

If you want the new section to contain properties of Active Directory objects (e.g. First Name, Employee ID, Account Options), do the following:
  • Select the AD object properties option.

  • Click Finish.
  • To add a property to the new section, click the Add button located under the Section fields list in the Forms and Views dialog.
  • Select a property and click OK.

Group members

The Group members section is available for Group objects only. To configure forms and views for Group objects, select the Group object type in step 4.

View screenshot

You can add the section only to the pages used for viewing and editing groups. To configure the pages, select the View or Modify tab in step 5.

If you want the new section to display group members, do the following:
  • Select the Group members option.

  • Click Finish.
  • How to filter group members displayed in the new section

    • In the Section Parameters group box located in the Forms and Views dialog, select Filter displayed members.

    • In the Specify Criteria dialog box, specify whether the section will display only members of a specific type or members that match a certain LDAP filter.

      How to construct an LDAP filter

      To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:

      • Launch the Adaxes Administration Console.
      • Connect to your Adaxes service and click Find on the toolbar.
      • Activate the LDAP Search tab.
      • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.

      You can insert value references (e.g. %department%) as a part of the LDAP filter.

      Using value references in the LDAP filter

      Value references will be substituted with corresponding property values of the user for which the section is displayed. For example, if you specify (department=%department%), the section will display only members whose department is the same as the user's department.

      To select a value reference, click the button at the right side of the LDAP filter edit box.

  • To enable users to add or remove group members using the new section, select Allow adding/removing members under Section Parameters.


If both Allow membership modification and Filter displayed members options are selected, users will be able to add only members that match the specified criteria. For example, if you selected to show only computers, users will not be able to add users, groups or contacts using the section.

AD object group membership

The AD object group membership section is available only for Users, Contacts, Groups, and Computers.

You can add the section only to the pages used for viewing and editing objects. To configure the pages, select the View or Modify tab in step 5.

If you want the new section to display groups the object is a member of, do the following:

  • Select the AD object group membership option.

  • Click Finish.
  • How to filter the groups displayed in the new section

    • In the Section Parameters group box located in the Forms and Views dialog, select Filter displayed groups.

    • In the Specify Criteria dialog box, specify whether the section will display only groups of a specific type or groups that match a certain LDAP filter.

      How to construct an LDAP filter

      To construct an LDAP filter, you can use the Find dialog in the Adaxes Administration Console:

      • Launch the Adaxes Administration Console.
      • Connect to your Adaxes service and click Find on the toolbar.
      • Activate the LDAP Search tab.
      • In the Enter LDAP filter field, click the embedded button to build a filter using the LDAP Filter Builder.

      You can insert value references (e.g. %distinguishedName%) as a part of the LDAP filter.

      Using value references in the LDAP filter

      Value references will be substituted with corresponding property values of the user for which the section is displayed. For example, if you specify (&(objectCategory=group)(managedBy=%distinguishedName%)), the section will display only the groups with the Managed By property containing the distinguished name of the user. In other words, users will be able to view only the groups they manage.

      To select a value reference, click the button at the right side of the LDAP filter edit box.

  • To enable users to change group membership using the new section, select Allow membership modification under Section Parameters.


If both Allow membership modification and Filter displayed groups options are selected, users will be able to add objects only to groups that match the specified criteria. For example, if you selected to show only Global Distribution groups, other group types will not be displayed when users click Add in the section.

Exchange properties

The Exchange properties section is available only for Users, Contacts, and Groups.

You can add the section only to the page used for viewing objects. To configure the page, select the View tab in step 5.

If you want the new section to contain Exchange properties of a mailbox, mail-enabled user, contact or group, do the following:

  • Select the Exchange properties option.

  • Click Finish.
  • In the Section Parameters group box located in the Forms and Views dialog, specify which Exchange properties will be displayed in the section.

  • To enable users to edit Exchange properties directly in the new section, select the Show the edit button option.

Office 365 properties

The Office 365 properties section is available for Users only. If the section is not visible when viewing or editing a specific user, this means that the user is not associated with an Office 365 tenant.

If you want the new section to allow viewing and modifying Office 365 settings of users, do the following:

  • Select the Office 365 properties option.

  • Click Finish.
  • How to configure which Office 365 settings will be displayed in the new section

    • In the Section Parameters group box located under the section list, check the Display only specific fields option.

    • Configure the available properties and licenses in the Section Configuration dialog that appears.

  • If you've selected the View tab on step 5, you can allow or disallow modifying Office 365 properties without switching to the edit mode. For this purpose, check or uncheck the Show the edit button option.

Additional properties

If you want the new section to enable users to specify any object property, even if this property is not available on the form, select the Additional properties option. In this case, the section will contain the Add property button that allows users to add any object property on the form.

If you want the form or view to display the links that allow users to quickly navigate to sections, select the Display section navigation links option.

It is recommended to select the Display section navigation links option, if there are many sections on the form.
When finished, click Apply.
There is no need to restart IIS to apply the changes, as the changes are applied automatically.
? Waiting

Progress status: Checking...