|
9/13/2008 9:46:44 AM
|
jmo808
Posts 1
|
After using Bulk Modify to change users home directory, they no longer have the user directory auto mapped upon login. I have to manually go into the ADU&C console and delete one character and type it back in and click ok, then it works again.
|
|
9/18/2008 2:44:38 AM
|
admin
Posts 331
|
Hi,
I've only had time to run a quick test but the update appeared to work ok in my test environment. Is it possible the character (maybe a space character?) was added to the end of the home directory in the Bulk Modify application?
I'll be running some more thorough tests as soon as I get time. I'm working on a new release at the moment - If I find a bug I'll make sure it's fixed in the next release. I'll post back after I've had time to run some more tests.
Thanks,
David
|
|
11/24/2008 10:40:56 AM
|
Petrus4
Posts 30
|
Hi I have been having the same issue with the newest version 2.4 Great software by the way!!!
I have to manually remove the home folder and then add it again before it becomes active.
Is there workaround or script I could use to activate the home folders after adding them with bulk modify?
Thanks!
edited by Petrus4 on 11/24/2008
|
|
11/24/2008 11:45:23 AM
|
admin
Posts 331
|
Petrus4 wrote:
Hi I have been having the same issue with the newest version 2.4 Great software by the way!!! I have to manually remove the home folder and then add it again before it becomes active. Is there workaround or script I could use to activate the home folders after adding them with bulk modify? Thanks! edited by Petrus4 on 11/24/2008
Hi,
I've verified that I am able to change the home folder successfully using version 2.4 of password control. The accounts are able to logon afterwards and the drives are mapped as expected.
I did notice that if I type an extra space in the bulk modify dialog, that the application does not truncate the space. Also, if you do leave a trailing space, the drive is no longer mapped. Please verify that you haven't typed any trailing spaces in the dialog or inadvertently pasted them in.
I'm not sure if a folder with a trailing space is legal or not - The Windows UI autmoatically truncates the space when creating new folders. It might be possible to create folders with a trailing space via other methods (I don't know why anyone would want to though). I might have been tempted to automatically truncate the space, but the ADU&C interface seems to allow you to do this (in 2008 anyway).
Also note that the application only changes the attributes in Active Directory. It does not attempt to modify permissions on those folders to grant the user access.
Please post back to let me know if this helps.
Thanks,
David
PS
Version 2.5 of Password Control will be available soon.
|
|
11/24/2008 2:11:30 PM
|
Petrus4
Posts 30
|
Hi David,
Thanks for the reply!
Hmm, so you wrote "Also note that the application only changes the attributes in Active Directory. It does not attempt to modify permissions on those folders to grant the user access." So this means that a folder with user access is not created when adding the attributes to AD with bulk modify like happens when you manually add the path to the users home directory?
It this is the case then one must always remove and then add the attribute again in order to activate it, correct?
So, if this is the case, could a script do this initializing?, I would rather not have to go through all my new users and add and remove the home directory just to create the user folders.
Great 2.5 is coming out , what are some new features?
|
|
11/25/2008 5:19:31 AM
|
admin
Posts 331
|
Petrus4 wrote:
Hi David, Thanks for the reply! Hmm, so you wrote "Also note that the application only changes the attributes in Active Directory. It does not attempt to modify permissions on those folders to grant the user access." So this means that a folder with user access is not created when adding the attributes to AD with bulk modify like happens when you manually add the path to the users home directory? It this is the case then one must always remove and then add the attribute again in order to activate it, correct? So, if this is the case, could a script do this initializing?, I would rather not have to go through all my new users and add and remove the home directory just to create the user folders. Great 2.5 is coming out , what are some new features?
The Bulk Modify tool will work fine if you are migrating folders to a different server (keeping the same permissions) and you need to modify the path in Active Directory. As long as the folders already exist and have the correct permissions assigned it works ok.
The Account Management Spreadsheet app on my website allows you to create home folders and set permissions when you create new accounts. Also, you could write a script to create home folders. Tools like xcacls or NTFSFix can be used to set permissions.
It’s also possible to get AD to create folders and assign permissions automatically – I can’t remember if this applies to home folders, folder redirection or both. It involves allowing domain users to create folders at the root level and granting creator owner permissions to subfolders and files. The folder gets created automatically when they log in and they get the permissions that apply to the creator owner group. It works quite well, but it does have a couple of caveats – if helpdesk/admin staff copy a file to the users work area, they might not be able to access it because they are not the creator owner. It’s been a few years since I’ve used this technique and it was on a 2000 domain.
Some features in the new version of Password Control:
Bulk Password Control Toolbar.
Multi-select OUs.
Reveal Password in Clear Text.
Improved Performance (Users with larger domains will notice a massive improvement)
Option to show friendly names in the grid.
Improved the ability to connect to multiple domains.
...
|
|
11/25/2008 5:57:52 AM
|
Petrus4
Posts 30
|
Nice new features!!
I was not aware you could reverse password encryption on the AD server 2003.
I understand now about the home directory creation. thanks for the tips!
|
|
11/25/2008 6:10:16 AM
|
Petrus4
Posts 30
|
with the account management spreadsheet can you pull user info into the sheet and then add attributes and push the users with new attributes back into to AD?
|
|
11/25/2008 9:45:00 AM
|
admin
Posts 331
|
Petrus4 wrote:
Nice new features!! I was not aware you could reverse password encryption on the AD server 2003. I understand now about the home directory creation. thanks for the tips!
Sorry, my list of new features probably wasn't very clear. This feature is simply to allow you to view the password you are typing in clear text - this allows you to verify that you've entered the password correctly before resetting the account(s). It doesn't allow you to view users existing passwords.
Active Directory hashes passwords by default so this is one way only encryption. The only way to get an existing users password is via brute force, dictionary attacks or key loggers - I don't think it's ethical to use any of these methods. You can choose to store passwords using reversible encryption - I'm not sure how easy this makes it to hack a users password, but regardless of the method used I don't think it's a good idea to reveal users passwords in clear text.
|
|
11/25/2008 9:56:55 AM
|
admin
Posts 331
|
Petrus4 wrote:
with the account management spreadsheet can you pull user info into the sheet and then add attributes and push the users with new attributes back into to AD?
The Account Management Spreadsheet app can only be used to create user accounts. It won't update attributes of existing accounts, but Password Control has a CSV Update feature and an Edit In Excel feature that you might find useful.
I created the spreadsheet app a few years ago and it hasn't changed much since that time. It's still a useful tool for creating user accounts (I used it myself just a few days ago), but it does have it's limitations. It's likely I'll be looking into developing a new solution for creating user accounts at some point.
|
|
11/26/2008 4:20:20 AM
|
Petrus4
Posts 30
|
admin wrote:
The Account Management Spreadsheet app can only be used to create user accounts. It won't update attributes of existing accounts, but Password Control has a CSV Update feature and an Edit In Excel feature that you might find useful.
Ok thanks!
So the csv update feature in password control will create user home directories if this attribute is added?
edited by Petrus4 on 11/26/2008
edited by Petrus4 on 11/26/2008
|
|
11/26/2008 5:34:24 AM
|
admin
Posts 331
|
Petrus4 wrote:
admin wrote: The Account Management Spreadsheet app can only be used to create user accounts. It won't update attributes of existing accounts, but Password Control has a CSV Update feature and an Edit In Excel feature that you might find useful. Ok thanks! So the csv update feature in password control will create user home directories if this attribute is added? edited by Petrus4 on 11/26/2008 edited by Petrus4 on 11/26/2008
Password Control doesn't include any features that allows you to create folders or assign permissions. It might be something that gets added at a later date, but it's not something you can do in version 2.4 or in version 2.5 when it's released. I mentioned the CSV update feature as it allows you to update user attributes from data stored in a spreadsheet format - the spreadsheet app only allows you to create user accounts from data in this format.
|
|
11/26/2008 6:17:53 AM
|
Petrus4
Posts 30
|
ok understood. Thanks.
I look forward to this feature being adding to password control. The way I have used it is after adding new users through a migration from Novell I add the home folder attribute via bulk modify as well as a logon script. Then I have to go to each user in ad users and computers and remove the mapped home folder and add it again, then apply the changes. This way a home folder is created with the right permissions and the folder is mapped when a user logs on. So it would be great if when this attribute is added through password control bulk modify, the home folders are also created as this would seem most logical.
thanks
|
|
pages:
1 |
|---|