Introducing Active Directory Administrative Center

re: Introducing Active Directory Administrative Center

Justin Hall MSFT — Mon, 29 Oct 2012 16:18:46 GMT

Thanks for the feedback John. It will be shared with ADAC feature team. What specific kinds of reporting capabilities would you want to see?

Justin

re: Introducing Active Directory Administrative Center

John Carver — Sat, 27 Oct 2012 18:39:07 GMT

Active Directory Administrative Center represents a long over due enhancement to the archaic Active Directory Users and Computers Snap-in, and while it does have numerous enhancements, we were a bit disappointed to see a lack of certain basic Active Directory reporting capabilities. All in all, nice work though.

re: Introducing Active Directory Administrative Center

Justin Hall MSFT — Mon, 16 Apr 2012 11:54:26 GMT

Hi,

Look for this improvment in Windows 8 versions of ADAC, where the Password Expiration Date will appear n the property page, in the More Information pane at the bottom.

Thanks,

Justin [MSFT]

re: Introducing Active Directory Administrative Center

CDugas — Fri, 13 Apr 2012 15:46:47 GMT

Why does ADAC not display the Password Expiration Date property for User objects?

re: Introducing Active Directory Administrative Center

Justin Hall MSFT — Thu, 19 Jan 2012 14:35:04 GMT

Can you follow up with me offline Justin.hall@microsoft.com? That will make this easier for me to get right people involved.

After we understand the issue more fully, we will capture all this in the docs for everyone else to be aware.

re: Introducing Active Directory Administrative Center

LA Richards — Thu, 19 Jan 2012 14:21:47 GMT

I wish it had been this simple. Making the change in the dsac.exe.config file allows the application to launch successfully but ADAC then informs you that it is unable to find any DC running ADWS. :(

What does .Net 4 fix?

re: Introducing Active Directory Administrative Center

Justin Hall MSFT — Thu, 19 Jan 2012 13:31:20 GMT

Thanks for raising the problem, and trying out the workaround. Glad to hear it's working for you. I'm told this is fixed in .Net 4.

Justin

re: Introducing Active Directory Administrative Center

LA Richards — Thu, 19 Jan 2012 01:57:22 GMT

I added the code from the blog post to dsac.exe.config with FIPS enabled in local policy and ADAC worked fine. So, I think that's a good fix. Am I in a position to ask for Microsoft to correct this.

re: Introducing Active Directory Administrative Center

LA Richards — Wed, 18 Jan 2012 21:48:21 GMT

Justin,

Thank you for responding. I understand the concept of changing what cipher suites a Windows system will use. But, will ADAC use anything other than SSLv2? Is changing the SSL version requirement in ADAC customizable? And, Is the fix recommended in the second blog post a supported customer change to ADAC? If I even knew how to do that. :) Because the way I read the blog post a developer would have to modify .NET code and tell it to "ignore" the FIPS requirement.

re: Introducing Active Directory Administrative Center

Justin Hall MSFT — Wed, 18 Jan 2012 15:27:21 GMT

Hi, I had never heard of this, but I found a couple threads that could be related:

social.technet.microsoft.com/.../0f64d59d-283b-43a9-9581-c7c51606509e

blogs.msdn.com/.../disabling-the-fips-algorithm-check.aspx

I will post any addditional info I can gather back here.

Thanks for your question,

Justin [MSFT]