{"id":2245,"date":"2018-08-16T05:50:45","date_gmt":"2018-08-16T05:50:45","guid":{"rendered":"https:\/\/davidpapkin.net\/?p=2245"},"modified":"2018-08-16T05:50:45","modified_gmt":"2018-08-16T05:50:45","slug":"david-papkin-taskpad-admin-tasks","status":"publish","type":"post","link":"https:\/\/davidpapkin.com\/?p=2245","title":{"rendered":"Active Directory admin taskpads by David Papkin"},"content":{"rendered":"

This David Papkin post is how to do Microsoft Active Directory<\/a> Admin tasks using taskpads.<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

The user can use a console taskpad to run tasks such as starting wizards, opening property pages, performing menu commands, running command lines, and opening webpages.<\/p>\n

Console taskpads are implemented by MMC(Microsoft Management Console ). That is, MMC takes care of setting up a console taskpad for a particular node.<\/p>\n

In this post, Abbie from the Sales department will be given permissions to Reset Password and Unlock Sales user accounts. She will be given a custom taskpad.<\/p>\n

Give permission to Unlock Sales accounts using Delegate Control<\/strong><\/p>\n

1.\u00a0Using Active Directory Users and Computers,\u00a0 right-click the Sales OU and select Delegate Control to launch the Delegation of Control Wizard and click Next to continue.<\/p>\n

\"David<\/p>\n

\"David<\/p>\n

2.\u00a0 Click the\u00a0 Add button to add Abbie as the security principle you want to Delegate Control to. Type Abbie<\/strong> and click Check Names and click OK\u00a0 to continue. Click Next<\/strong>.<\/p>\n

\"Image\"<\/p>\n

\"Image\"<\/p>\n

\"Image\"<\/p>\n

3.\u00a0On the Tasks to Delegate<\/strong>\u00a0 screen, select Create a custom task to delegate<\/strong>\u00a0 radio button and click Next<\/strong><\/p>\n

\"Image\"<\/p>\n

4. On the Active Directory type screen, select\u00a0 Only the following objects radio button and click Next<\/strong>.<\/p>\n

\"Image\"<\/p>\n

5. Select General and Property-specific<\/strong>\u00a0and click Next<\/strong>.<\/p>\n

\"Image\"<\/p>\n

6. Select Read<\/strong>\u00a0and Read lockoutTime <\/strong>and\u00a0Write lockoutTime<\/strong>\u00a0 –> Next –> Finish<\/strong>.<\/p>\n

\"Image\"<\/p>\n

\"Image\"<\/p>\n

Create Taskpad for Sales Department<\/strong><\/p>\n

1.\u00a0Type Start ‘ Run’ MMC to launch an instance of Microsoft Management Console.
\n\"Image\"<\/p>\n

 <\/p>\n

2.\u00a0Select File from the MMC ‘ Add\/Remove Snap-ins and select Active Direct Users and Computers (ADUC)
\n\"Image\"<\/p>\n

\"Image\"<\/p>\n

3.\u00a0Click Add to add ADUC Snap-in to the MMC and click OK. Click File–> Save As to give your new Taskpad a new Name such as Sales Taskpad.Sales
\n\"Image\"<\/p>\n

4.\u00a0Expand the Domain and select the Sales OU in the domain tree.
\n\"Image\"<\/p>\n

5.\u00a0Select More Actions\u00a0 on the Actions window on the right side
\n\"Image\"<\/p>\n

6.\u00a0Click on New Taskpad View<\/strong> to start the New Taskpad View Wizard and click Next<\/strong>.<\/p>\n

\"Image\"<\/p>\n

\"Image\"<\/p>\n

7.\u00a0On the Taskpad Style window you can select the style, such as Vertical, Horizontal etc.\u00a0 For this example, I will select Horizontal and select Next.<\/strong>
\n\"Image\"<\/p>\n

8.\u00a0On Taskpad Reuse screen, Apply the Taskpad view to Selected tree item\u00a0 and click Next<\/strong>
\n\"Image\"<\/p>\n

9.\u00a0On the Name and Description screen type Sales Taskpad<\/strong> and click Next<\/strong>.
\n\"Image\"<\/p>\n

\"Image\"<\/p>\n

 <\/p>\n

10.\u00a0Click Finish to complete the wizard. New Task Wizard will be launched since the Add new tasks checkbox was selected. Click Next.<\/p>\n

\"Image\"<\/p>\n

11.\u00a0Select the Menu command button and click Next<\/strong>.
\n\"Image\"<\/p>\n

\"Image\"<\/p>\n

 <\/p>\n

12.\u00a0The Command Source is Items listed in the results pane. Click Reset Password<\/strong> in the right pane and select the user who you want to Delegate Reset Password such as Abbie<\/strong> in the right pane. Click Next<\/strong>.
\n\"Image\"<\/p>\n

13.\u00a0The Task Name will be filled in with Reset Password. Click Next<\/strong>.
\n\"Image\"<\/p>\n

14.\u00a0Select an Icon and click Next then Finish. The New Task Wizard will be launched. Click Next<\/strong>.<\/p>\n

\"Image\"<\/p>\n

\"Image\"<\/p>\n

\"Image\"<\/p>\n

15.\u00a0Select Menu command radio button then Next<\/strong>.
\n\"Image\"<\/p>\n

16.\u00a0Select Properties from Available commands and select Abbie and Next<\/strong>. We need to select Properties<\/strong> to read the properties of the User. Only Unlock will be writeable.
\n\"Image\"<\/p>\n

17.\u00a0Use Unlock as the task name and click Next<\/strong>.
\n\"Image\"<\/p>\n

18.\u00a0Select an Icon and click Next<\/strong> then Finish<\/strong>.
\n\"Image\"<\/p>\n

\"Image\"<\/p>\n

19.\u00a0Abbie can perform resetting passwords and Unlock accounts.
\n\"Image\"<\/p>\n

 <\/p>\n

Locking down the console.<\/strong><\/p>\n

Now you have finished the taskpad, you must set the console so that users can only use the commands in the console and not do other tasks.<\/p>\n

1.\u00a0Select View from the Console menu and click Customize.
\n\"Image\"<\/p>\n

\"Image\"<\/p>\n

2.\u00a0Uncheck any unwanted items and click OK<\/strong>.
\n\"Image\"<\/p>\n

\"Image\"<\/p>\n

3.\u00a0Click File ‘ Options and change Console mode to User mode and uncheck Allow the users to customize views<\/strong> and check Do not save changes<\/strong> and click OK to\u00a0<\/strong>\u00a0Exit.
\n\"Image\"<\/p>\n

\"Image\"<\/p>\n

 <\/p>\n

4.\u00a0Reopen the Sales Taskpad. Select any user and the Icons will appear below to reset password and unlock accounts.
\n\"Image\"<\/p>\n

Install RSAT on Target computer where you will use the Sales Taskpad.<\/strong><\/p>\n

Remote Server Administration Tools (RSAT) enables IT administrators to remotely manage roles and features in Windows Server 2012 R2, Windows Server 2012, Windows Server 2008, and Windows Server 2008 R2 from a computer that is running Windows 10, Windows 8.1, Windows 8, Windows 7, or Windows Vista.<\/p>\n

1.\u00a0You will need to install RSAT on any computer to use this Taskpad because it is based on ADUC and non Domain Controllers will not have this snap-in. Trying to open this Sales Taskpad will give an initialization error.
\n\"Image\"<\/p>\n

 <\/p>\n

2.\u00a0To install RSAT 2016 on Server 2016 use the powershell command
\nInstall-Windowsfeature -IncludedAllSubfeatures RSAT
\n\"Image\"<\/p>\n

 <\/p>\n

3.\u00a0To install RSAT on Windows 10 download it from Microsoft.<\/p>\n

http:\/\/www.microsoft.com\/en-my\/download\/details.aspx?id=45520<\/a><\/p>\n

Future builds on Windows 10 starting with 1809 should have this available to be installed via powershell.<\/p>\n

You cannot install RSAT on computers that are running Home or Standard editions of Windows. You can install RSAT only on Professional or Enterprise editions of the Windows client operating system.<\/p>\n

support.microsoft.com\/en-sg\/help\/2693643\/remote-server-administration-tools-rsat-for-windows-operating-systems<\/a><\/p>\n

social.technet.microsoft.com\/wiki\/contents\/articles\/2816.how-to-create-custom-mmc-and-add-taskpad.aspx<\/a><\/p>\n

End of<\/span> David Papkin<\/a> post in\u00a0 Active Directory Admin tasks using taskpads<\/p>\n

http:\/\/davidpapkin.org\/<\/a><\/p>\n

David Papkin favorite movies<\/strong><\/p>\n

Robert Deniro in GoodFellas<\/a><\/p>\n

Ava Gardner in Singapore (Flim Noir)<\/a><\/p>\n

Clarke Gable in China Seas<\/a><\/p>\n

 <\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

This David Papkin post is how to do Microsoft Active Directory Admin tasks using taskpads.           The user can use a console taskpad to run tasks such as starting wizards, opening property pages, performing menu commands,… <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[36,56,70,71,108,146],"class_list":["post-2245","post","type-post","status-publish","format-standard","hentry","category-david-papkin","tag-active-directory","tag-clarkegable","tag-davidpapkin","tag-deniro","tag-microsoft","tag-singapore"],"_links":{"self":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/posts\/2245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2245"}],"version-history":[{"count":0,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/posts\/2245\/revisions"}],"wp:attachment":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}