Quickly update and maintain user information in Active Directory
Activate AD Update
- Open the admin console > Modules, AD Update.
- You specify which data fields can be updated by users and which users will be required to make the updates:
Note: First Name, Last Name, Middle Initials and Title are dimmed and cannot be updated using AD Update.
A quick way to get the AD up to date is selecting 'Users must update their AD information first time their run eMailSignature'.
To specify that the user must verify and update his contact information in AD, select the user and double-click the column Force update next time.
The value is changed to 'YES'. Only users that have executed Sign.exe can be selected.
When Sign.exe is executed, Please Verify Your Directory Information screen will appear with editable fields highlighted.
When users click 'Save', their changes are saved in AD.
Setting AD permissions for AD Update
Depending on your infrastructure, users might already have access to edit their own information in AD without any permission issues.
If users cannot update their own AD information, you need to ensure that users have sufficient permission.
Specifying permissions for AD fields
This example shows you how to change the permission to edit the Fax Number field for a user called JD (John Doe).
- Select the user in AD Users and Computers and right-click and click Properties.
- Select the Security tab.
- If the user doesn't already exist in the list, then add him by clicking the 'add' button, search for the user and add him to the list.
- Click the 'Advanced' button and you see some options for modifying security for this object:
Select the item which is most relevant.
In this example we choose the item SELF 'Read/Write Phone and Mail Options' and click 'Edit'.
You will now see a screen where you on a detailed level can set the options for this user.
In this case we want the user to have modify rights on the Fax number field so we check the Allow columns for read and write for the Fax Number.
Click 'OK' and the user JD is now allowed to update the fax number field in AD.