Active Directory Edit User Properties Action

The Active Directory Edit User Properties action allows you to edit some properties of an existing user.

Active Directory Users

Specify the user(s) that you wish to edit. Users can be specified as LDAP Distinguished Names, or any valid username format - including simple usernames, Domain\UserName syntax, or User@Domain syntax. The LDAP://domainName/ prefix can be used as well.

Click the Add User(s) button to display a dialog allowing you to search for one or more users to add to the list.

To edit all of the users in a group, use the %VarName% syntax.

User Password

Check this box to force the user(s) to change their password as next login.

User Activation

You can elect to enable or disable users' accounts.

Computer Logon Permissions

This setting corresponds to the "Log On To..." dialog under the Account tab of the Windows "Active Directory Users & Computers" console. You can specify a list of allowed computers, allow all computers, or leave this setting unchanged.

Home Directory

You can elect to set the home directory of the user(s). You can also elect to set a network drive mapping for the directory name.

Logon Script

You can set a logon script for the user.

Department / Company Name / Manager

To can elect to set the users' department, company and manager names. The manager must also be an Active Directory user (you can specify their name as a username or a Distinguished Name.)

Credentials

You can choose to specify a username and password to use when connecting to the Active Directory. If no username is specified, the current Windows credentials will be used.