UMRA – Edit user logon Example Tips and Help at 9:06 PM

If you have questions email me @ jjmusicpro@hotmail.com

If you haven’t already, please read my first post on where and how to download a trial version of User Management Resource Administrator, developed by tools4ever. UMRA

Download Trial Version of UMRA > http://www.tools4ever.com/download/
Download Trial Version of SSRPM > http://www.tools4ever.com/download/

UMRA – Edit user logon Example Tips and Help

If you have already read my blog about some of the basics on the Create User (AD) UMRA Action then please visit http://activedirectoryadmin.blogspot.com/2009/08/umra-create-user-ad-action-help.html that blog to catch up to speed on this post.

Previous UMRA Action Topics.
-Move – Rename (AD)
-Remove User Group Membership
-Set User Group Memberships
-Edit User (AD)
-Get User (AD)
-Create User (AD)
-Create user (no AD)

In this blog we will be talking about the UMRA action Edit user logon. The UMRA action Edit user logon is very much like the Edit User (AD) action however, it’s a stripped down version of the Edit User (AD) action, but adds a few more options to the mix. Now some of you might be asking, why wouldn’t you use the Edit User (AD) action compared to this action. It’s really up to you on what action to use, however there is no need to use an Edit User (AD) if all you need to do are a few properties or attribute changes in the UMRA action Edit user logon. In most cases I will use this action if I only need to edit a few of the active directory logon properties. So below is a quick overview of the properties of this action.

User Object -
This by default is set to %UserObject%. To bind to the user object, see the action Get User (AD) upon successful location of a user account ,it will bind to the user that it was passed, either by user dn, or user samaccountname.

Username -
Now you can pass the username of the user, to this property directory, and bypass the Get User (AD) action to bind to the user first, and use the %UserObject% variable. Please note though, that if you use this property, you will need to clear out the %UserObject% variable from the User Object Property, and you must specific a domain and domain controller.

Domain -
The variable or hard coded domain name. This value can be passed in with the standard %domain% variable if you have it set in Global Init File.

Domain controller -
The variable or hard coded domain controller name. This value can be passed in with the standard %dc% variable if you have it set in Global Init File.

Password generator + password
You can create a new password for the user, and have it randomly generated based on your length, characters etc. on the fly, and it will place it in the %password% variable. Or you can just hard code a password into the password property, or make a composite password based on information passed into the script.

User must change password at next logon -
If set to YES, the user will need to change their password once they successfully login.
If set to NO, it will let the user login as normal.

User cannot change password -
If set to YES, it will not all the user to change there password.
If set to NO, user can change password.
** Note you can not have User must change password at next logon ON, and have User cannot change password set to NO.

Password never expires -
If set to YES, password for the user does not expire.
If set to NO, users password will expire if a GPO is placed on domain or OU.

Account disabled -
If set to YES, users Active Directory account is disabled.
If set to NO, users account is enabled / live in active directory

Unlock the Account -
If set to YES, it will unlock the account, if its locked because of to many failed logins.
If set to NO, it will not unlock the account in active directory

So there you have it, as you can see this UMRA action Edit user logon is very similar to other actions we’ve talked about in the past, but it combines most of the common “User Logon” features into 1 area. I hope this helps any of you out there with questions you might have had on this action.