Skip to content

1. Explorer

Artur Marzano edited this page Dec 16, 2024 · 42 revisions

Modifications

Creating Attributes

TODO

Changing Attributes

TODO

Deleting Attributes

TODO

Creating Objects

If you use the Ctrl+N keybinding while selecting any object in the tree, you'll open the Object Creator:

image

This page allows you to create the following types of objects:

  • OrganizationalUnit
  • Container
  • User
  • Group
  • Computer

These objects will be created with the minimum set of attributes, and you'll have to change the attributes afterwards if needed. For reference, these are the templates that godap uses to create objects: image

When creating User objects, for example, they will be disabled at first, and you might want to enable them by using Ctrl+A to change their userAccountControl flags. User/computer accounts will also not have a password set after creation, so you might want to add one with Ctrl+P.

This page also offers a feature to set the Entry TTL of an object upon creation. This value is AD-specific, and setting it to any non-negative value will make the object a Dynamic Object and set its EntryTTL to the specified value in seconds. After that amount of seconds, the object will be completely removed from AD (note that it may take a few minutes after the TTL for the cleanup routine to run).

image

Moving Objects

TODO

Deleting Objects

To delete an object simply select it in the tree and confirm the deletion:

image

Changing Passwords

To change the password of a principal, simply select it and hit Ctrl+P:

image

Note that TLS (either via LDAPS or StartTLS) is usually required to change a principal's password. Check the 0. General section for guidance on how to connect using LDAPS or upgrade an existing connection with StartTLS.

Changing userAccountControl

After selecting an object, hit Ctrl+A to change its' userAccountControl attribute interactively. In AD, the userAccountControl governs parameters related to the account, such as whether it's disabled, whether a password is required, if the account is trusted for delegation, etc.

image

Exporting Objects

TODO

Clone this wiki locally