Page 1 of 9

0029-v1.0
30 December 2011

How-To

Active Directory
Implementation Date
30 December 2011

Details
You would need to download Adminpak 2003SP1 from the Microsoft website.
How to create new User

Go to Active Directory users and Computers >> Go to the ALL OU >> Go to the Users OU >>Click on
the Create new user

Supply the first name, last name and user login name. User login name is first 6 letters for last name +
first 2 letters of first name. For John Doe,
DoeJo (if the username exist, erase the last letter and add 1)

Page 1 of 9

Page 2 of 9
0029-v1.0
30 December 2011

How-To

Active Directory

click next. Generate a password from http://www.pctools.com/guides/password/

Make sure User must change password at next logon is selected and click finish.

Page 2 of 9

Page 3 of 9
0029-v1.0
30 December 2011

How-To

Active Directory

Make sure to add description to the user

If the user is a contractual / temporary or intern, make sure to configure the end date of the account.
This can be found under Account tab under Account expires. If there is no date indicated on the
CTAR, it would be one year from the date the account has been created.

Page 3 of 9

Page 4 of 9
0029-v1.0
30 December 2011

How-To

Active Directory

Add the users email on the Email field. Afterwards, add the xxxx@mail.bradycorp.com email address
on the other button found after the website field

Add the logon bat. (SiteSynonym + logon.bat). If the user has a home drive, add it to home folder

Page 4 of 9

Page 5 of 9
0029-v1.0
30 December 2011

How-To

Active Directory
How To Unlock Account
1) Go to the said account >> Right Click >> Properties

2) Go to Account Tab

* If Account is locked out has a check mark, simply uncheck it to unlock the account.

Page 5 of 9

Page 6 of 9
0029-v1.0
30 December 2011

How-To

Active Directory
How To Reset Password
1) Go to the said account >> Right Click >> Reset Password

2) New window appears, change the password and make sure User must change password at next
logon should have a check mark. (for VPN accounts, do not select User must change password at
next logon)

Page 6 of 9

Page 7 of 9
0029-v1.0
30 December 2011

How-To

Active Directory

Resigned / Disable account Accounts

1) Go to the account name and (right click ) disable the account.

2) If there are any home drives, move it to Bones drive (NA and Manila)
VPN Enable
1) Go to the said account >> Right Click >> Properties

Page 7 of 9

Page 8 of 9
0029-v1.0
30 December 2011

How-To

Active Directory

2) Go to dial in tab >> Under remote Access Permission (Dial in or VPN), select Allow Access

Account Termination 30 days

1) Search for the AD Account and delete the account

Disk Quota Management

1) Remotely connect to the server. Right click on the drive were disk quota is managed and select
properties
2) Go to quota >> Quota entries
3) Search for the account of the user and increase the disk quota

Page 8 of 9

Page 9 of 9
0029-v1.0
30 December 2011

How-To

Active Directory

Revision History
Date

Version

Changes made by

Details

12.30.2011

V1.0

Kookie Cascon

Initial Document made

Page 9 of 9