Active Directory: Viewing “Attribute Editor” after finding an account via ADUC's “Find” option

Question

When I activate the Advanced features (View -> Advanced Features) and open a user's properties by navigating to their OU and right clicking the user object, I see the Attribute Editor tab.

However, if I search for a user (right click the domain -> Find -> search for the user), and double click on the user, I do not see the tab.

I cannot normally navigate to users because some OUs have too many users. Can someone suggest an alternative that allows me to view the Attribute Editor tab?

Answer 1

I'd say set up a query for the user search instead of using the Find feature. It's a few extra clicks, but gives you the Attribute Editor tab properly.

Make sure you set the query definition to the "Users..." type instead of the "Common Queries" type, so you get the right search behavior..

..and the Attribute Editor tab works on the object when opened from this view.

Answer 2

You have several options.

• You can use Softera LDAP Browser for free.

• You can use Apache Directory Studio for free.

• You can use ADExplorer for free.

• You can setup filter directly in ADUC on OU's view so it will filter out users as you need

• You can write in C++ your own property sheet host application for user object (I did before, I have source code) which can be invoked from comand line based on some parameter (sAMAccountName for example)

UPDATE:

• You can use build-in ADSI Edit MMC snapin (thank to Ryan Bolger for tip)

Answer 3

You can use dsac.exe instead of dsa.msc. It does not have that limitation. If you don't have to use a smart card, AD Explorer like Jim suggested is probably the way to go, otherwise it would be adsiedit.

Answer 4

I think your best bet is to use ADExplorer