Active Directory Tool - UMRA

Hey everyone… I had to make a new blog about a very nifty tool I’ve been using for sometime now to help with my everyday day to day Active Directory Management. The tool I’ve been using is called User Management Resource Administrator, developed by tools4ever. This by far has been the single most important tool in my array of User Life Cycle Management Tools for Active Directory. Let me tell you, I’ve seen tons of tools out there to help you with this task, or that task, however, User Management Resource Administrator (UMRA for short) is the only I’ve found to be flexible to my needs, and my specific tasks. No more spending countless hours developing some VB Script, or looking online for some tool to help me do my tasks, I can now simply create my own script using simple drag and drop actions with UMRA and be done in minutes. Below I will show you a few basics examples how to get your feet wet with UMRA.

Download Trial Version of UMRA à http://www.tools4ever.com/download/
Once you have installed UMRA we are ready to create a simple Mass project. Mass project you ask? A Mass project is a quick way to update or get Active Directory objects in bulk. So for example, I could update all Users in Active Directory with a new description and phone number from a CSV or Network data I have. The days of going through each account 1 by 1 is over… What use to take me around 8-10 hours to update 1500+ accounts, now takes me 8-10 seconds.

So let’s begin…
1. Click File à New à Mass Project
2. Expand the Variable Actions Tree à Variable Operations à Drag/Drop 2 “Set Variable” Options to your script window.
A. Click on the first “Set Variable” action, and give it a variable name and value
a. VariableName = %dc% VariableValue = One of Your Domain Controllers
B. Click on the second “Set Variable” action, and give it a variable name and value
a. VariableName = %domain% VariableValue = Your Domain Name

When you’re done with the above steps your script window should look like below.


3. Expand the User Tree à Active Directory à Drag/Drop “Get User” optionThis option will allow us to Bind to the User Object, and update, or get information from it.
A. Click on the “Get User” option we pulled over and double click on it.
a. Right click on %FullName% and select “Clear Value”
b. Double Click on “Domain controller” and update its value to %dc%
When you’re done with these steps your script screen should look like below.


4. Expand the Active Directory Tree à Drag/Drop “Set attribute” option
This option will allow us to “Set/Update” the User Objects account with a new value.
A. Click on the “Set attribute (AD)” option in your script
a. Right click on %ActiveDirectoryObject% and select “Clear Value”
b. Double click on LDAP attribute displayname click on Value Radio Button, then in the drop down select “description”
c. Double click on Attribute value and set the variable to %csv_description%
When you’re done with these steps your script screen should look like below.


Now that our script is completed, we can now need to provide it with some type of data.
I created a 2 column CSV with the users accountname, and the new description.
If you want my example you can download it here à Download My CSVClick the “File data” tab, next to the “Script” tab.
Right Click in the white space below the tab, and select “Import File Data”
Locate your file and click “Ok”

You will now see the data from your CSV on your screen, we will now set column variables. What this will do is, each time the script runs, it will take the data in that column, and apply it to the scripts variables.
Right Click on “Column_A” and click on “properties”, set the variable to %UserName%
Right Click on “Column_B” and click on “properties”, set the variable to %csv_description%

When you’re done with these steps your script screen should look like below.


Now your project is ready to run.Right click on 1 of your accounts, and select “Run Selection”. On the “Log Messages” lower window, you will see the actions log as to what happened when you just ran your first mass project.

Now that you’ve updated the Active Directory Account, go check the account in AD to verify.

If you want to run your complete CSV file, select “Run” instead of “Run Selection”..

If you have any questions let me know, I will post other scripts later.

0 comments:

Post a Comment