Active Administrator 8.7 - User Guide

Resetting passwords

Resetting passwords

You can reset the password on a user account. When resetting the password, you can choose to unlock the account. You also can unlock the account without resetting the password by selecting More | Unlock.

To reset the password on a user accounts

1	Click Security & Delegation | Security.

2	Select a domain controller, if necessary.

NOTE: Use the icons to manage the selected managed domain controller. See Managing domain controllers.

3	Drill down to locate the user account.

4	Select the user account, and click More | Reset Password.

5	Type the new password.

6	By default, the user must change their password at the next logon.

7	To unlock the account, select the check box.

8

Click OK.

Resetting computers

Resetting computers

You can reset the account password on computers locally. The change is written to the computer account object on the domain controller that resides in the same domain. Active Directory replication is initiated so that other domain controllers receive the change.

To reset the password on a computer

1	Click Security & Delegation | Security.

2	Select a domain controller, if necessary.

3	Drill down to locate the computers.

4	Select one or more computers, and click More | Reset Computer.

5	Click Yes to reset the computers.

Moving Active Directory objects

Moving Active Directory objects

You can move a selected Active Directory® object to another container.

To move Active Directory objects

1	Click Security & Delegation | Security.

2	Select a domain controller, if necessary.

NOTE: Use the icons to manage the selected managed domain controller. See Managing domain controllers.

3	Select objects.

4	Select More | Move.

5	Select the container.

6

Click OK.

Managing group memberships

Managing group memberships

You have a variety of methods to manage group memberships. You can add members to a selected group, add a selected account to a group, or use a wizard to add multiple accounts to multiple selected groups.

NOTE: If the Forest functional level is Windows Server® 2016 or Windows Server 2019, and the Privileged Access Management Feature is enabled for the forest, you can set the Time-to-Live (TTL) value for selected group members.

Topics 

•	Adding members to a selected group

•	Adding selected accounts to a group

•	Adding multiple accounts to selected groups