Welcome back to our year with Adaxes series! In this part, we are going to explore two key features that I personally love. First, we will look at the web consoles available in Adaxes and how you can customize them for your environment. These web based tools have the ability to replace Active Directory Users and Computer (ADUC) as well Active Directory Administrative Center (ADAC). We will then look at the self-service tools available for online and offline use. These tools automate away most of the routine object work that you are probably already doing in AD. Specifically, they can eliminate attribute changes, group membership changes, and password resets.
Using Web Consoles to Manage Active Directory
In the earlier articles of this series, we quickly mentioned the different management methods that Adaxes allows. Along with an expanded local administration console, three web interfaces are available after initial installation. To make access a bit easier, I actually took the shortcut files provided in the install and deployed those with Group Policy.
Of the two management web consoles, the Administrators version is most similar to ADAC/ADUC. The Help Desk version is a good starting point for HR (or in our case, media specialist use). In larger organizations, it would make a great tool for tier 1 helpdesk. Both can include the familiar and navigable AD tree of OUs. These console excels by bringing common tasks to the forefront. Think about easy ADAC made resetting passwords by including that tool on the start page. Now think about how easy other tasks could be if you had a simple button available at the very beginning. In the screenshot below, you can see our administrators console with common tasks brought to the homepage.
The three consoles are really well thought out. If you need to change them, it is very simple to create a copy and to edit the new page. A few years ago, one of my favorite tools was a modified ADUC MMC with a bunch of scripts builtin to the side pane. The Administrators web console, which I spend most of my time in, is a more powerful version of that modified MMC. It is also a lot easier to manage and scale out. You can see some of these customization in the console above. For example, we often prestage computer accounts in AD before imaging them and have added the Create Computer button directly to the homepage.