Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We've just migrated to a pure Microsoft environment and are looking for an end-user AD management solution.

Ideally we'd like users to be able to manage their personal info in AD. We have ~500 users in our domain.

I've found a few products from google searches, but I'd be interested to hear what others may be using.

share|improve this question

3 Answers 3

We've got about 85% of the infrastructure in place to build our own web-portal to do just that. It hooks into our identity management system, so their personal information is changed in not just AD, but the ERP/HR systems as well.

The tricky part is creating the transaction processor behind the web page. PowerShell is great for that, but straight up LDAP can do for a lot.

share|improve this answer

I have setup a system similar to what you are talking about in the past with Apache+PHP+adLdap. While I have nothing to share -- its fairly simple to create a display of a list of given parameters, and push them back in via PHP. If you are at all familiar with PHP and LDAP it shouldn't take more than half a day to a day to implement.

share|improve this answer

Quest ActiveRoles is a nice product. It'll also let you completely handle provisioning users and groups, ensuring that everything follows your rigorous standards. It has a fully functional web application for end user self-service as well. The catch is it's rather pricey.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.