Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there any tool that can be used by HR to fill and change user details in AD and Exchange?
(eg: company, department, telephone numbers, etc.)


locked by HopelessN00b Mar 12 '15 at 7:32

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site, so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. More info: help center.

closed as off-topic by masegaloeh, mdpc, EEAA, HopelessN00b Mar 12 '15 at 7:28

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 2 down vote accepted

You need a delegation tool. What versions of Windows Server/Exchange are you using? Something like Directory Update or Directory Manager would work for this if you only need a subset of users to have the ability to edit entries for the organization.

Directory Manager seems to be the tool I'm looking for. Thanks. – Nelson Reis Dec 27 '10 at 12:33

There are a number of tools avaiable, but none of them work without you first using delegation of control, which you appear to be lacking an understanding of. Here's an old article that explains it pretty nicely. The concept is the same whether your domain is W2K, W2K3, or W2K8.

Once you've read the article and gleaned an understanding of what it is you're asking for, you can look for the appropriate tool for your needs. One I've used is ADManager Plus.

Although I've picked @ewwhite's answer, because that kind of tool is what I need, I thank you for that great article you pointed. – Nelson Reis Dec 27 '10 at 12:40

AD tool is available for free at
It's a command-line LDAP editing tool. Here's a quick usage example.

You may also want to check with LDAPSoft.
They have a commercial product, LDAP Admin Tool Standard Edition, that may work with AD. I've not used it though.

These tools you mentioned are for admins. I need a tool that HR staff can use to change those informations. – Nelson Reis Dec 24 '10 at 15:47
Your original post had "RH" instead of "HR", so I assumed you meant RedHat Linux. That changes the context of the question. – ewwhite Dec 24 '10 at 15:50
Sorry, you're right. I'd mistyped it. – Nelson Reis Dec 24 '10 at 15:51
While it's true those are admin tools, if HR wants to do it in batch jobs, like say for seasonal hires or students at a school or similar situations, you could set up a script that populates AD from info in a csv. I've written such scripts in the past to clean up old contact info in an inherited AD. If that's what you are looking for let me know, I see if I can dig up that script for you. – JamesBarnett Dec 27 '10 at 15:25

Not the answer you're looking for? Browse other questions tagged or ask your own question.