Every administrator wants their systems to be smart. For example, when a employee moves from one department to another, all of the department-based attributes for their user account need to be updated. Having the system know and update what needs to be changed would save the administrator countless hours of manual configuration. What if you could accomplish this for Active Directory?
Consider a scenario where users in specified groups are managed by certain managers. Since some groups have a unique manager, the manager attribute needs to be updated when an employee is added to one of these groups. Trying to do this with the Microsoft tools, including PowerShell, would be difficult at best, if not impossible. However, using a tool like ADManager Plus, this dependent attribute update is a breeze.
ADManager Plus provides User Modification Templates, which allow rules to be defined. Figure 1 illustrates these templates and rules for the scenario above.
Figure 1. A user modification rule.
With just a few clicks in this template, you can create a rule to easily update the manager attribute for every user that is added to a specified group. Now, all manager attributes are not only correct, but updated automatically by the system as well.
If you would like to test out ADManager Plus, you can get a 30 day trial here.
Latest posts by Derek Melber (see all)
- Remove accidental spaces while creating user accounts - March 10, 2017
- Assign the manager attribute automatically when group membership changes - March 2, 2017
- Three neglected password policy tips that increase security - December 29, 2016