You can modify the properties of Active Directory contacts with the Active Roles Console.
To modify contact properties
-
In the Console tree, locate and select the folder that contains the contact you want to modify.
-
In the details pane, right-click the contact you want to modify, then click Properties.
-
Use the tabs in the Properties dialog to view or modify properties of the contact.
-
If you want to view or modify additional properties (those for which the tabs in the Properties dialog do not provide data entries), navigate to the Object tab and click Advanced Properties.
-
After setting all the properties you want, click OK.
NOTE: Consider the following when modifying object properties:
-
In the wizard, some property labels may be displayed as hyperlinks. The hyperlink indicates that Active Roles enforces certain policy restrictions on the property. To examine policy details, click the hyperlink: the policy information is displayed. For more information, see Getting policy-related information.
The policy information is also displayed whenever you supply a property value that violates a policy restriction. The wizard cannot proceed until you enter an acceptable value.
-
To modify properties for multiple objects, press and hold Ctrl, then click each object. Right-click the selection, then click Properties.
-
You can use the Properties dialog to view or modify any property of the object by navigating to the Object tab and clicking Advanced Properties. In the Advanced Properties window you can manage all properties, including those that cannot be accessed via the Properties dialog itself.
You can also display the Advanced Properties window by right-clicking the object and selecting All Tasks > Advanced Properties.
-
To locate the object that you want to modify, use the Find function of Active Roles. Once you found the object, open the Properties page by right-clicking the object, and clicking Properties.
Figure 23: Modifying contact properties
You can rename Active Directory contacts with the Active Roles Console.
To rename a contact
-
In the Console tree, locate and select the folder that contains the contact you want to rename.
-
In the details pane, right-click the contact and click Rename.
-
Type a new name (or clear the existing name), then press Enter to display the Rename User dialog.
Figure 24: Rename Contact
-
Use the Rename Contact dialog to modify (if needed) the naming properties of the user account such as the user full name, first name, last name, display name.
-
When finished, click OK.
NOTE: Consider the following when renaming an object:
-
The behavior of the dialog may vary depending on the configuration of Active Roles policies. To determine whether a given item in the dialog is under the control of a certain policy, observe the text label next to the item: the underlined text label indicates that some policy restrictions are in effect. Click underlined text labels to examine the policies that govern the behavior of the dialog. For more information, see Getting policy-related information.
-
To locate the object you want to rename, use the Find function of Active Roles. Once you found the object, rename it by selecting it in the list of search results, right-clicking it, clicking Rename, then specifying the new name. To apply the new name, press Enter.
You can add Active Directory contacts to a group with the Active Roles Console.
To add a contact to a group
-
In the Console tree, locate and select the folder that contains the contact you want to add to a group.
-
In the details pane, right-click the contact, then click Add to a Group.
-
Use the Select Objects dialog to locate and select the group to which you want to add the contact (you can select more than one group).
NOTE: Consider the following when adding an object to a group:
-
In the Select Objects dialog, you can select groups from the list or type group names, separating them with semicolons. Click Check Names to verify the names you type. If Active Roles cannot find a group, it prompts you to correct the name.
-
You can add multiple objects to a group at a time: Select the objects, right-click the selection, and click Add to a Group. To select multiple objects, press and hold down Ctrl, then click each object.
When you select multiple objects, the Member Of tab lists the groups to which all the selected objects belong. If one of the objects does not belong to a given group, that group does not appear in the list.
-
You can also add or remove objects from groups by using the Properties dialog: Select one or more objects, right-click the selection, click Properties, and go to the Member Of tab in the Properties dialog.
-
On the Member Of tab, you can manage groups directly from the list of groups. To manage a group, right-click it, and use commands on the shortcut menu.
-
The Member Of tab lists the groups to which the object belongs. If the Show nested groups check box is selected, the list also includes the groups to which the object belongs owing to group nesting.
-
You can also add the object to groups by clicking Add on the Member Of tab. This displays the Select Objects dialog, allowing you to select the groups to which you want to add the object.
-
The Temporal Membership Settings button can be used to specify the date and time when the object should be added or removed from the selected groups. For more information about this feature, see Using temporal group memberships.
-
By adding an object to a group, you can assign permissions to all of the objects in that group and filter Group Policy settings on all objects in that group.
-
To locate objects you want to add to a certain group, use the Find function of Active Roles. Once you found the objects, select the accounts in the list of search results, right-click the selection, and click Add to a Group.
You can remove contacts from Active Directory groups with the Active Roles Console.
To remove a contact from a group
-
In the Console tree, locate and select the folder that contains the contact you want to remove from a group.
-
In the details pane, right-click the contact, then click Properties.
-
On the Member Of tab in the Properties dialog, clear the Show nested groups check box, select the group from which you want to remove the contact, and click Remove.
Figure 25: Adding and removing contacts from groups
NOTE: Consider the following when removing an object from a group:
-
If you have not cleared the Show nested groups check box, the list on the Member Of tab also includes the groups to which the object belongs indirectly, that is, because of group nesting. If you select such a group from the list, the Remove button is unavailable. An object can be removed only from those groups of which the object is a direct member.
-
You cannot remove objects from their primary groups. Instead, you can change the primary group of an object. To do so, on the Member Of tab, select a different group from the list, then click Set Primary Group.
