Automate Account Disable/Deletion in Multiple Domains
We are testing automatic account creation, disabling, and deletion using ADManager Plus using MS SQL server integration to tap into a database that will be managed by HR. My organization has multiple domains (production lab, dev), and we would like to
M365 Shared Mailbox Creation with Manager/Owner
Hi ADManager plus team, I believe that you have now enabled options to create M365 Shared Mailbox through ADManager plus. I was giving it a shot and realized that we do not have the option to set a Manager/Owner to the Shared Mailbox (this is not a DirSync
When will AD Manager Plus support the new Duo Mobile Universal Prompt method?
https://duo.com/docs/duoweb
AD Group Membership Report Automation-Audit
Feature Request to report on AD security group or distro group membership by selected OU's with automation to email list of members to "Managed By" and custom notification message
License monitoring system
ADManager plus does not seem to have the option to monitor License counts. This may stand out as a unique feature if implemented. Currently, there appears to be no easy solution for license monitoring. If M365 license hits a certain threshold (1 or 0)
Notification sent to new User when created
We are trying to send an email notification of required online training to new employees when they are on-boarded. However, the current notification sends out the email prior to the completion of the email synchronization process, so that it sends the email, but the end user mailbox has not been fully replicated in O365 and hence never receives the email. We do not receive any errors; it is just that the email is sent but never received by the mailbox. We CC'd our shared mailbox and do receive the
Rename / Custom Name for Authenticator
It would be useful to be able to rename/customise the name for Authenticators, similar to how the “Custom TOTP Authenticator” works ; specifically I am concerned with the Azure AD MFA authenticator; this name confuses our uses when "Microsoft Authenticator"
Ability to use User Creation Templates for User Modification Templates (Or to Export them in)
Currently I have around 360 User Creation Templates as our organization decided to do a Template per Employee Position in the company and the creation process works great. What doesn't work great is I don't want to create 360 duplicate User Modification
Can Automation perform check - to avoid incorrect modification?
We use an automation to disable any accounts that have "never logged on" in 40 x days. We use the "never logged on" report that I think checks the logoncount attribute Yesterday, the script inadvertently disabled 55 x user accounts due to a WAN issue
Create group/Distro with all Direct and Indirect reports
We are constantly dealing with requests for distribution lists that are for all reports for a given manager, director, or VP. Currently we have to run scripts to do this on an individual basis and only 1 or 2 people know how to edit/copy these for new
Opening a Servicedesk ticket from AdManager (intergration\workflow)
Wouldn't it be great to be able to make opening a Servicedesk ticket part of the workflow in AdManager. It would be a great customer service option I would like to implement.
Option to escape special characters when passing objects to custom script
We would like the ability to escape problematic characters found in objects when they are being passed to a script. An example is a recent user with the first name of "D'Artra". When this is passed as a parameter in a line using the %givenname% variable, it breaks the script due to the extra apostrophe.
How to add dynamic reviewer to NTFS-Permission modification
Hello community! We're using ADManager Plus 7.1.0. We have just started using the product and looking for a solution for following problem: Is it possible to modify the "set Folder permission" -workflow that that reviewer is dynamically assign to to owner
Display Bitlocker key on computer properties - or show for an individual machine?
I have bitlocker keys stored in AD and I would like to display the key associated with a particular machine, and no other keys, the report that shows all keys is too cumbersome for my helpdesk staff. Has anyone managed to setup to do this? /RJ
Group Search via API
I have a question about ADManager Plus RestAPI. Is it possible to retrive a list of groups from specific OU? Or maybe I can retrieve 'member of' attribute from Search user action? I
Employee Search Configure AD Search missing pwdlastset
I like the idea of Employee Preferences but it's missing the most common pwdlastset attribute from the user list. Can this be please added to the list. Currently there is only whenchanged but this is not when the password was set.
Can manageengine add a feature within admanager to set spn's like MSSQLSvc
Can manageengine add a feature within admanager to set spn's like MSSQLSvc for example to set an spn for a managed service account for a server running sql currently, I have to login to a server, and use command prompt to and run setspn -s MSSQLSvc/FDQN of server:1433 domain\managed service account also, does admanager have the option to create managed service accounts and install them on servers?
Allow two-factor "remember me" setting
While I applaud ME's inclusion of two-factor authentication in ADmanager, it doesn't seem to have been implemented with any forethought with regards to usability. If you have a session timeout of 15-20 minutes, you're basically forced to 2-factor auth back into ADmanager 12-20 times per typical work day. Also, what happens if a technician forgets his/her phone at home? There is no temporary "exception" process. Please implement a "remember me on this computer" setting that allows us to define how
Automate generation of CSV file from SQL table\view or other DB
I don't know whether this would be useful to anybody else but I thought I'd throw it out there. I'm finding that i'm creating more and more SQL views\tables to manage various aspects of AD objects. Some can be handled directly using SQL integrations\automation's i.e user creation, modify attributes whereas others have to be manipulated using csv's. My personal panacea would be to use SQL integration for all automation's\tasks (probably much easier to say than implement) and not have to create scripts
Convert to Shared Mailbox when deprovisioning users for Exchange Hybrid deployment / Exchange Online
In a Hybrid Deployment when we disable users, we do not delete their mailboxes right away. What we do is convert their mailbox to a shared mailbox to save on Exchange Online licenses. This is should an automation tasks and as a part of disable policy. To convert a mailbox to shared, we need to perform three steps: 1 - Convert the mailbox to shared in Exchange Online. Run the following command in Exchange Online Powershell: Set-Mailbox MyMailbox -Type Shared 2 - Modify the on-premises AD attributes
User Template Creation Rules
In AD Manager I'd like to see more condition variables added to the creation templates rules like "contains", "does not contain", "starts with", "ends with", etc.. Some of these are available with certain rule fields but not with all of them. The rules would be more flexible if more condition variables were available with all of the fields.
Better Pictures in AD
Please consider implementing the newer "userPhoto" feature for high quality photos in Active Directory that are stored in Exchange Mailbox and automatically resized and distributed to thumbnail. This gives far better result that the old thumbnail feature of AD. This relates to this excelent blog posting: http://www.expta.com/2012/12/working-with-hi-res-photos-in-exchange.html https://forums.manageengine.com/topic/automated-ad-photo-sync#49000008242248 Is it a big task for Manage Engine to change
Office 365 License Management?
I need to modify licensing existing Office 365 accounts via an automated process. I CAN write a custom powershell script and run it via AD360, but was hoping this ability would be added in the User Modification templates. Am I missing something? Is this an upcoming feature perhaps? My goal is to remove access to Office 365 and Office downloads for users that aren't current students, but leave their email license (exchange online) intact.
Move TS home folder
In the Delete/Disable policy, we need the option to move the TS home folder (instead of just delete) like we can with their standard home folder on the line above. Being a heavy Citrix shop, we don't assign a home folder. We only use the TS home folder and we need to restore that if we enable that user in the future.
View Exchange Permission
When we go into a users mailbox we need the ability to see who has been assigned permission to view and or use that users mailbox.
Limiting results in Employee Search
Unfortunately, we have several service accounts that are mixed in with our user accounts for GPO reasons. Is it possible to configure the AD Search to ignore results where a field is null? All employees have their employee ID in the correct field in Active Directory. We would like to limit search results to only accounts that have data in that field.
Notification Profile - Add option for sending notification when user is Suspended
Curiously missing from the list of options is the ability to send a notification when a user is suspended. Unless I'm missing it, this would be nice to have.
Dynamic Security Groups?
I see the option for Dynamic Distribution Groups, but what about Dynamic Security Groups?
Schedule Backup database
Hi, In some ManageEngine products, database backup can be performed automatically by setting a schedule for that. Is this feature going to be added to ADManager Plus soon? Regards Rochdi
Add more contact field options for G Suite integration
We have users being created and suspended fine, but there's still a few things that could be added to allow us to stop use of GADS. Right now, contact details like phone numbers, addresses, and so on are not passed to g suite on user creation. It seems like the only things that are set are the full name, email address, password, and any OU or groups you've selected for the user. I'd like to see, in the least, anything that could be considered "contact card" details also passed to the G Suite contact
[Automation] Custom Script based on reports
Hello, Is it possible to run some Automation tasks based on custom scheduled reports (created by our own) ? Regards, Dache Julien IBA
Wish list
Hello ManageEngine guys ! We bought your ADManager Plus product recently, and tested it for a couples of weeks now. Here are some wishes we have : Email Reports : The reports sent by email are all zipped in .zip files. We cannot then preview it in the Outlook app. Is it possible to change the file type (or to not zip it), as we can directly consult the report on the Outlook app ? User creation Templates : Is it possible to include the "Contains" choice in the list, in the rule pane of a template
To find not rebooted system X days - AD computer LastLogonDate.
Hi, Please share the possibility, normally in AD computer we can find the computer last logon time. Based on that we can find the system when last longing and based on that we can determine the when the system was rebooted, In corporate mostly the user don't reboot the system. if we add the feature in ad manager plus, Most help to administrator. Mariappan S
Option to include an 'Are you sure'/'Whatif' screen for user templates.
We would like a screen that comes before template execution with a display of what is about to change or be created and have the technician verify that information before execution. This would cut down on typos, especially for user creation. This would be specific to technicians and not requesters, as that functionality exists in the form of requests.
Migrating from test to production environment
Are there any methods for exporting things out of one AD Manager environment such as delegation roles, naming formats and other server configurations, and importing them into another environment? A lot of configuration has gone into my test environment and I'd love to be able to pull that into my production server in some automated fashion.
Active Directory Object ACL View
Unclear if this is available in AD Manager or not. I'm wondering if there is a way for AD Manager to list the ACL permission list for an Active Directory object(s)? We're attempting to audit some existing active directory group objects to see what group or user has rights to manage them on our domain. We would find this a helpful addition if its not already available. If it is possible could you help explain how to generate this report.
Allow for the import of .xlsx files in addition to .csv
It would be awesome if we could import .xlsx files in addition to .csv files. Because .csv files remove all formatting from the spreadsheets, we currently have our HR staff edit everything on a .xlsx file and then save it .csv because .csv files remove pre-pending 0s, don't allow formulas, etc. It would save us an enormous amount of time and keep us from having to correct files after they are imported as often. Thanks, Daniel L.
Exchange 2010/2013/2016 shared mailbox Feature Request
Hi there, we are adding alot of shared mailboxes and there are 2 things, which I would like to set in AD Manager Plus while creating shared mailboxes: 1. Set the mailbox settings so that sent items will also appear in the shared mailbox Sent Items folder (this need to be set, when the shared mailbox is set for automapping) This is an example of a powershell script, which will set this configuration for Exchange 2013/2016: Set-Mailbox "shared mailbox" -MessageCopyForSentAsEnabled $true -MessageCopyForSendOnBehalfEnabled
Branding for ADManager Plus
I'd like to request the ability to brand the user interface such that my company colors and logo can be used. I'm pushing this tool to our service desk for template based user account provisioning and deprovisioning and it would be nice to brand it much like what we have for ADSelfservice Plus. Thanks in advance.
Feature Request: Tighter integration to SDP
Suggesting a feature for ADM+ and SDP: If a request is approved in SDP, and the request has the need to add/change/delete an entity in ADM+, make SDP have a resource type that is a template in ADM+. When a technician picks up the ticket, and the approval is made, allow a single button press to effect the change in ADM+ Example I: Terminate an employee. HR Fills out request to terminate, including a resource field linking to AD entry HR Manager approves Technician gets ticket notice and picks up
Next Page