new user objects and process

Can I ask in AD, when setting up a new user account, what actions does an admin have to go through (i.e. 1, 2, 3, 4 and 5). And at what part is a temporary password assigned. I noticed a few in our AD without a password so need to understand a) the new user setup process, b) where a password is assigned, and c) any justified reason why a password may not be assigned during this process. So really root cause as to why the admin may have missed assigned a password.
LVL 3
pma111Asked:
Who is Participating?
 
Krzysztof PytkoConnect With a Mentor Senior Active Directory EngineerCommented:
This should be followed this way for new user creation:

The most important part! User has to be always created with initial password (when you have password policy in a domain where minimum characters is other than 0 it is mandatory step)

Evaluate if user is temporary or regular employee and when he/she starts the job

For temporary user create account expiration in the last day of his/her work
For regular user do not set up account expiration. But:
- if he/she is already working, set up enabled account with initial password and check box forcing its change during the first logon
- if he/she is going to start work in some time, create account with initial password, but disable account that no one would be able to use it knowing the initial password

Password is store within an attribute in AD and cannot be accessed to be read

Regards,
Krzysztof
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.