[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 371
  • Last Modified:

new user objects and process

Can I ask in AD, when setting up a new user account, what actions does an admin have to go through (i.e. 1, 2, 3, 4 and 5). And at what part is a temporary password assigned. I noticed a few in our AD without a password so need to understand a) the new user setup process, b) where a password is assigned, and c) any justified reason why a password may not be assigned during this process. So really root cause as to why the admin may have missed assigned a password.
1 Solution
Krzysztof PytkoActive Directory EngineerCommented:
This should be followed this way for new user creation:

The most important part! User has to be always created with initial password (when you have password policy in a domain where minimum characters is other than 0 it is mandatory step)

Evaluate if user is temporary or regular employee and when he/she starts the job

For temporary user create account expiration in the last day of his/her work
For regular user do not set up account expiration. But:
- if he/she is already working, set up enabled account with initial password and check box forcing its change during the first logon
- if he/she is going to start work in some time, create account with initial password, but disable account that no one would be able to use it knowing the initial password

Password is store within an attribute in AD and cannot be accessed to be read


Featured Post

Upgrade your Question Security!

Add Premium security features to your question to ensure its privacy or anonymity. Learn more about your ability to control Question Security today.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now