Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We've just migrated to a pure Microsoft environment and are looking for an end-user AD management solution.

Ideally we'd like users to be able to manage their personal info in AD. We have ~500 users in our domain.

I've found a few products from google searches, but I'd be interested to hear what others may be using.

share|improve this question

closed as off-topic by masegaloeh, Sven Mar 7 '15 at 23:44

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

We've got about 85% of the infrastructure in place to build our own web-portal to do just that. It hooks into our identity management system, so their personal information is changed in not just AD, but the ERP/HR systems as well.

The tricky part is creating the transaction processor behind the web page. PowerShell is great for that, but straight up LDAP can do for a lot.

share|improve this answer

I have setup a system similar to what you are talking about in the past with Apache+PHP+adLdap. While I have nothing to share -- its fairly simple to create a display of a list of given parameters, and push them back in via PHP. If you are at all familiar with PHP and LDAP it shouldn't take more than half a day to a day to implement.

share|improve this answer

Quest ActiveRoles is a nice product. It'll also let you completely handle provisioning users and groups, ensuring that everything follows your rigorous standards. It has a fully functional web application for end user self-service as well. The catch is it's rather pricey.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.