-
Introduction
-
Requirements
-
Installation
-
Licensing and Registration
-
Search Active Directory
-
Managing Users in Active
Directory
-
Managing Computers in
Active Directory
-
Working with Multiple
Domains
ITPro ToolKit® is IT Help Desk software for the Technical Support
Professional. Quickly search Active Directory for users and
computers and manage them across the network. It provides quick and easy
access to several utilities required when effectively managing a large Microsoft®
network. This page describes use of the product, requirements and
functions.
- Windows®
XP or Server 2003 is required on the
system where ITPro ToolKit® is executed
- Systems queried across the network require
Windows® 2000/XP/2003 with Windows® Management Instrumentation
enabled.
- Microsoft®
Directory
Services is required. All computers and users must be a
member of the same Active Directory Domain.
- Administrator permissions is required on
the local system where ITPro ToolKit is executed.
- Access to remote
systems and Active Directory is dependent on your
existing Active Directory Security Model.
Copy the executable (ITPro.EXE) to a dedicated folder on your
network and launch it.
The first time you launch ITPro ToolKit, a "COMPUTERS"
and "USERS" folder is created beneath the directory where ITPro.EXE
lives. This folder will host all subsequent HTML and configuration files
associated with the users and computers on your network.
ITPro ToolKit® (product) is licensed per
Active Domain. Each Active Directory Domain requires a product
license. In addition, ITPro ToolKit is licensed based on the number of
computer objects in the domain. The licensed product will not run if
inadequate licenses are not purchased for the number of computers discovered in
Active Directory. After registering the
product, you may purchase additional licenses "as needed". Please review the End User License Agreement for
details.
To register ITPro ToolKit, copy the file sent to you by
Absolute Dynamics to the same folder as ITPro.EXE. When the
executable is launched, ITPro ToolKit will automatically be registered.
Absolute Dynamics provides the following benefits to our
customers:
- E-mail support
- Elimination trial version
limitation
- Additional licenses can be purchased at anytime
- Input into the future design all Absolute Dynamics products
- Free upgrades for the first year
ITPro's initial
dialog window provides several search options.
Search Path: By
default the beginning search path is the root of the domain.
If this path is changed it must be a valid LDAP path in the
current domain. ITPro Toolkit uses your existing
credentials when searching, modifying or administering
Active Directory objects or remote computers on the network.
To access other domains on your network simply perform a
RunAs command against ITPro.EXE and specify the proper
domain credentials.
Display Name:
Search user objects based on the display name. Simply enter
a portion of the name and click the corresponding search
button. It returns a list of all user object display names
containing the characters that match the search criteria.
User Name:
Search user objects based on the username or samAccountName.
Enter a portion of the username and click the corresponding
search button. It returns a list of user object usernames
that begin with the search criteria. A wildcard (*) may be
used in front of the partial user name to search for user
objects containing the search criteria anywhere in the name.
Computer Name:
Search computer objects based on the computer name. Enter a
portion of the computer name and click the corresponding
search button. It returns a list of computer objects that
begin with the search criteria. A wildcard (*) may be used
in front of the partial computer name to search for
computers containing the search criteria anywhere in the
name.
Security Requirement(s): Able
to read Active Directory Objects.
|
 |
|
Click Image to Enlarge |
Distinguished Name: The
distinguished name for the user is displayed at the top of
the screen. It identifies the domain that holds the user
object as well as the complete path through the container
hierarchy by which the object is reached. Every object in
the Active Directory has a unique distinguished name. This
distinguished name identifies the “Donnie Byerley” user
object in the absolutedynamics.com domain.
Full Name: When
a new user is created in Active Directory, the Full Name
field is always generated in FirstName LastName format. In
turn, this field sets the Display Name field on
creation, therefore, you end up with a FirstName LastName
formatted global address list.
E-Mail: The
assigned email address for the user. This field can be
updated using
ITPro ToolKit.
Telephone: The
assigned phone number for the user. This field can be
updated using
ITPro ToolKit.
Mobile: The
assigned mobile phone number for the user. This field can be
updated using ITPro ToolKit.
Pager: The
assigned pager number for the user. This field can be
updated using
ITPro ToolKit.
Home Directory: The
fully qualified UNC to the home directory assigned to the
user in Active Directory.
Last Logon: The
date and time the user last logged on to Active Directory,
followed by the name of the domain controller that
authenticated the user.
Account Status: The
status of the Active Directory User object. May be "ACTIVE",
"LOCKED" or "DISABLED".
Assigned Computer: List
of computers that has been assigned to the user. A computer
is assigned to the user when the user account is managed by
clicking the "Currently Logged On" icon within the Computer
Information Window. The "Assigned Computer" icon can be
clicked to manage a computer that has been assigned to the
user.
Member of: List
of groups in which the user belongs. Use the "Add" and
"Remove" buttons to manage the user's membership.
Apply Changes: Updates
the fields (e-mail, telephone, mobile and pager) of the
Active Directory user object.
Disable Account: Disables
the user account. The user will not be able to logon to
Active Directory.
Enable Account: Enables
the user account so they can logon to Active Directory.
Unlock Account: Unlocks
an account that has been locked because a specified number
of failed logons occur due to wrong passwords within a
certain interval of time.
Home Folder: Opens
the user's assigned home folder in Windows Explorer
(requires access to the user's home folder).
Change Password: Changes
the users' password. The password must meet minimum
requirements set in your Active Directory Security Policy.
You are provided an option to force the user to change the
password upon their first logon.
Cancel: Cancel the user information window and return to
ITPro ToolKit main dialog.
Recommended Security
Requirements: Account
Operator or delegated permission to user account objects in Active
Directory.
 |
|
Click Image to Enlarge |
Distinguished Name: The
distinguished name for the computer is displayed at the top
of the screen. It identifies the domain that holds the
computer object as well as the complete path through the
container hierarchy by which the object is reached. Every
object in the Active Directory has a unique distinguished
name. This distinguished name identifies the “lt-byerley”
computer object in the absolutedynamics.com domain.
Active Directory Name: The
name of the computer object in Active Directory. This name may
not match the Network Name (see Network Name below for details).
Operating System: The
operating system installed on the computer.
Service Pack: The
operating system service pack installed on the computer.
Date Created: The date the
computer object was created in Active Directory.
Password Last Set: The
date the password was last set. By default, computer objects
change their password every 30 days. Computers that have not
change their password within 30 days, may be considered
inactive.
Active Directory Status: The
status of the computer object in Active Directory. May be
"ACTIVE" or "DISABLED".
Location: The
assigned location of the computer.
This field can be updated using
ITPro ToolKit.
Description: The
assigned description of the computer.
This field can be updated using
ITPro ToolKit.
Network Name: ITPro Toolkit performs
a reverse name resolution against the Active Directory name
queried. If the network name does not match the Active
Directory name, it could mean that the IP address for the
computer has been re-assigned to a different computer on the
network. This happens when a computer has been re-imaged
with a new operating system, then renamed and connected to
the network, but the the old computer account was never
deleted from Active Directory.
Nevertheless, the AD
Toolkit can be used to manage the Active Directory object.
While the Support Toolkit is used to manage the actual
network name.
Network Status: Displays
whether or not the computer is up and running on the
network. If the computer is not available, hardware
information is not available and Support Tools cannot be
used.
Currently Logged On: Displays
the user that is currently logged on to the computer.
Clicking this icon allows you to manage the user object and
assigns the computer to the user within ITPro Toolkit. Once
computers have been assigned to users, you can easily manage
their computers from the User Information window.
AD Toolkit: Tools
used to manage the computer object in Active Directory.
Note: these tools only apply to the Active Directory Name
found during the query.
Enable Account: Enables
the computer object in Active Directory.
Disable Account: Disables
the computer object in Active Directory. Users cannot logon
to the domain from a computer that has been disabled.
Reset Account: Resets
the computer account password to the default. This is used
when the secure channel has been broken between the computer
and the domain controller. It requires the computer to be
re-joined to the domain.
Delete Account: Permanently
deletes the computer object and all associated memberships
and permissions assigned.
Support Tools: Tools
used to provide computer support over the network. These
tools only apply to the Network Name discovered during the
reverse name resolution.
Remote Desktop: Access
the console of the remote computer.
Manage Computer: Remotely
manage the computer.
Explore Share: Access
shares (including hidden shares) on the remote computer.
System Report: Generate
a detailed system configuration report in HTML format.
rmtSHUTDOWN: Remotely
shutdown or reboot the computer.
Wake on Lan: Send
a magic packet over the network to power on the computer.
Apply: Update
the LOCATION and DESCRIPTION field of the Active Directory
Computer Object.
Cancel: Cancel
the computer information window and return to ITPro ToolKit
main dialog.
Recommended Security Requirements: Account
Operator rights to Active Directory and Local Administrator
rights to the remote computers being managed.
ITPro Toolkit uses your existing
credentials when searching, modifying or administering
Active Directory objects or remote computers on the network.
To access other domains on your network, right click
ITPro.EXE and perform a RunAs command against the
executable, then specify the proper domain credentials.
|
