Active Administrator 8.6.2 - User Guide

Managing security

Managing security

The main permissions display in Active Administrator® provides extended information in addition to the general rights that are visible in the built-in tools. You also can enable/disable accounts and reset passwords.

Topics 

•	Managing Active Directory objects

•	Viewing Active Directory objects by type

•	Reporting on Active Directory objects by type

•	Viewing native permissions

•	Viewing Active Template delegations

•	Resetting passwords

•	Resetting computers

•	Moving Active Directory objects

•	Managing group memberships

•	Reporting on Active Directory objects

Managing Active Directory objects

Managing Active Directory objects

The Active Directory® containers and objects are listed in a tree in the left pane. You can drill down in the tree and view details in the top right pane.

To drill down and view details

1	Click Security & Delegation | Security.

2	Select a domain controller, if necessary.

NOTE: Use the icons to manage the selected managed domain controller. See Managing domain controllers.

3	Use the tool bar to manage Active Directory objects. The options on the tool bar change depending on the object selected.

 

NOTE: You can perform some options on multiple selected items. Options that cannot be performed on multiple selected items are unavailable. If different types of items are selected, only options that can be performed to all selected types are available.

 

Table 10. Security tool bar

Option	Description
Refresh	Refresh the display.
Refresh Container	Refresh the selected container.
Properties	Edit the properties of the selected container.
View	View and report on all users, groups, organization units, or computers. See Viewing Active Directory objects by type and Reporting on Active Directory objects by type.
New	Add a new computer, contact, group, organizational unit, printer, shared folder, or user.
Delete	Delete the selected objects.
Permissions	Manage native permissions. See Viewing native permissions.
Delegations	Manage Active Template delegations. See Viewing Active Template delegations.
More | Rename	Rename the selected object.
More | Add to Group	Add selected accounts to a group. See Managing group memberships.
More | Unlock	Unlock the selected accounts. See Resetting passwords.
More | Reset Password	Reset the password on the selected account. See Resetting passwords.
More | Reset Computer	Reset the password on selected computers. See Resetting computers.
More | Manage Computer	Opens the Microsoft® Computer Management Console.
More | Move	Move selected Active Directory objects to another container. See Moving Active Directory objects. NOTE: To test the move, you might want to run a simulation. See Modeling GPO changes.
More | Disable More | Enable	Disable or enable the selected accounts. The icon for an enabled account is blue. If an account is disabled, the icon is gray. NOTE: There is no confirmation for the process.
More | Group Members	Manage the list of users in the selected group. See Managing group memberships. NOTE: If the Forest functional level is Windows Server® 2016 or Windows Server 2019, and the Privileged Access Management Feature is enabled for the forest, you can change the Time-to-Live (TTL) value for selected group members.
More | Group Membership Wizard	Opens the Group Membership Wizard where you can add multiple members to selected groups. See Managing group memberships.

Viewing Active Directory objects by type

Viewing Active Directory objects by type

You can view all Active Directory® objects of a specific type within a container and its subcontainers. You can choose to view all users, groups, organizational units, or computers. Within each view, you can customize the display by selecting the columns of interest to you. When viewing users, you can filter the list by entering criteria for selected columns. You can display the list as a report that you can view or print, or you can schedule a report to run at the time of your choosing.

To view Active Directory objects by type

1	Click Security & Delegation | Security.

2	Select a domain controller, if necessary.

NOTE: Use the icons to manage the selected managed domain controller. See Managing domain controllers.

3	Select a container, click View, and choose a type to view.

4	Use the tool bar to manage the list that displays.

 

Table 11. View objects tool bar

Option	Description
Back	Return to the previous display.
Refresh	Refresh the display.
Stop	Stop loading of objects if the process is taking too long.
Report List	Display the list as a report that you can view or print. NOTE: Any applied filters to the user list will affect the report.
Export	Export the list to a .csv or .txt file. NOTE: Any applied filters to the user list will affect the export file. NOTE: To export only selected columns, click Column, select the columns to exclude from the export, and click OK.
LDAP Path	Display the path to the selected object.
	Move the selected object to a different container. See Moving Active Directory objects.
Columns	Select the columns you want to display or export. By default, all columns are selected.
Filter	Filter the list of users. There is a filter for each column. • To clear a filter, click Filter, click Clear, and click OK.
Schedule	Schedule a report for the selected object. See Reporting on Active Directory objects by type.

Reporting on Active Directory objects by type

Reporting on Active Directory objects by type

You can generate and schedule reports for all Active Directory® objects of a specific type within a container and its subcontainers. When viewing users, you can filter the list by entering criteria for selected columns. You can display the list as a report that you can view or print, or you can schedule a report to run at the time of your choosing.

To generate a report and display in a report editor

1	Click Security & Delegation | Security.

2	Select a domain controller, if necessary.

NOTE: Use the icons to manage the selected managed domain controller. See Managing domain controllers.

3	Select a container, click View, and choose a type to view.

When viewing users, you can filter the list by entering criteria for selected columns.

4	Click Report List.

To schedule a report to send by email or to save to a file

1	Click Security & Delegation | Security.

2	Select a domain controller, if necessary.

NOTE: Use the icons to manage the selected managed domain controller. See Managing domain controllers.

3	Select a container, click View, and choose a type to view.

4	Click Schedule.

5	By default, the report schedule is enabled. To disable the schedule, clear the check box.

6	By default, selected filters are not applied to the report. To override the selected filters, select the check box.

7	Change the default report name if desired.

8	By default, the date and time are appended to the end of the file name. Clear the check box if you do not want the date and time appended to the file name.

9	By default, a PDF file is created. You can choose a different format.

10	You can send the report by email and save it to a file.

To send an email

a	Click Email, if necessary.

b	By default, the logged in account displays in the Email Addresses list. To add more recipients, click Add, type the email addresses, and click OK.

c	Modify the default subject line if desired.

d	Set the priority of the email.

To save the file to a folder

a	Click Save to Folder.

b	Click Add.

c	Add a path to the location where you want to store the report file.

d

Click OK.

11	Click Set Schedule, set the schedule for the report, and click OK.

12

Click OK.

The scheduled report is added to the list of scheduled reports.

▪	To edit a selected report schedule, click Edit.

▪	To delete selected report schedules, click Remove.