Active Directory: Viewing "Attribute Editor" after finding an account via ADUC's "Find" option

Question

When I activate the Advanced features (View -> Advanced Features) and open a user's properties by navigating to their OU and right clicking the user object, I see the Attribute Editor tab.

However, if I search for a user (right click the domain -> Find -> search for the user), and double click on the user, I do not see the tab.

I cannot normally navigate to users because some OUs have too many users. Can someone suggest an alternative that allows me to view the Attribute Editor tab?

Holy hell, this bugs me to no end as well. I tend to use @Shane Madden's answer, but it's still highly annoying. — Ryan Bolger, Jun 15 '12 at 07:06
Seems windows server 2003 would not shown this tab. I turned to `ADSIEdit.msc` instead. — Ivan Chau, Jun 14 '16 at 02:19

score 13 · Accepted Answer · answered Jun 15 '12 at 06:34

13

I'd say set up a query for the user search instead of using the Find feature. It's a few extra clicks, but gives you the Attribute Editor tab properly.

enter image description here

Make sure you set the query definition to the "Users..." type instead of the "Common Queries" type, so you get the right search behavior..

enter image description here

..and the Attribute Editor tab works on the object when opened from this view.

answered Jun 15 '12 at 06:34

Shane Madden

114,520
13
181
251

2

This does not always work. Simply use the MMC Menu item "View" -> "Advanced Features". – Marc Jan 19 '15 at 13:23
2

@Marc The premise of the question is even when that option is active, it will never show up when an object is opened from the search window. – Shane Madden Jan 19 '15 at 17:34
@marc Your solution also doesn't work – Bassie Mar 28 '18 at 00:18

score 3 · Answer 2 · answered Apr 24 '15 at 12:53

This seems to be a solution!

http://activedirectoryfaq.com/2014/10/ad-attribute-editor-missing-make-search-visible

Open de object after using "Find". Click the "Member of" tab. Open a group of which the object is a member. Close the object window. Locate the object in the group and double-click it. The object window should open with the "Attribute Editor" available.

Should work.

Tried it myself but I don't have an Attribute Editor available (Attribute Editor does not exist in a 2000/2003 forest).

https://social.technet.microsoft.com/Forums/windowsserver/en-US/6e6ef6bd-b5c9-4f16-b346-097832e3b93c/rsat-and-the-missing-attribute-editor-tab-solution?forum=winserverManagement

score 2 · Answer 3 · 2012-06-15T08:39:24.187

2

You have several options.

You can use Softera LDAP Browser for free.
You can use Apache Directory Studio for free.
You can use ADExplorer for free.
You can setup filter directly in ADUC on OU's view so it will filter out users as you need
You can write in C++ your own property sheet host application for user object (I did before, I have source code) which can be invoked from comand line based on some parameter (sAMAccountName for example)

UPDATE:

You can use build-in ADSI Edit MMC snapin (thank to Ryan Bolger for tip)

edited Jun 15 '12 at 08:39

answered Jun 15 '12 at 05:28

You forgot to include ADSI Edit which is also built-in. =) – Ryan Bolger Jun 15 '12 at 07:07
1

W.r.t. the source code: sharing is caring! I'd like to see that. – Belmin Fernandez Jun 18 '12 at 13:50

Greg Askew · Answer 4 · 2012-06-15T13:13:29.167

1

You can use dsac.exe instead of dsa.msc. It does not have that limitation. If you don't have to use a smart card, AD Explorer like Jim suggested is probably the way to go, otherwise it would be adsiedit.

edited Jun 15 '12 at 13:13

answered Jun 15 '12 at 12:56

Greg Askew

35,880
5
54
82

score 0 · Answer 5 · edited Jan 27 '20 at 19:36

0

Literally the best answer: Install Active Directory Administrative Center and un-fustercluck your day....

A two-click solution. Type the user name in Global Search, double click the user name.

The attributes info is in the Extensions section at the bottom.

See the pics.

edited Jan 27 '20 at 19:36

Marco

1,709
3
17
31

answered Jan 27 '20 at 10:41

Robert Shivers

1

score 0 · Answer 6 · answered Jun 15 '12 at 05:09

0

I think your best bet is to use ADExplorer

answered Jun 15 '12 at 05:09

Jim B

24,081
4
36
60

score 0 · Answer 7 · edited Nov 20 '19 at 14:59

0

I know this is an old thread but I found it searching for a fix to this.

My best solution here is to use two ADUC windows. One does the search with the Distinguished Name shown in the results window. Then browse to the user in the other window. All day long I do this two step process to modify something in AD.

edited Nov 20 '19 at 14:59

kenlukas

3,101
2
16
26

answered Nov 20 '19 at 13:56

Silicon Falcon

1

Active Directory: Viewing "Attribute Editor" after finding an account via ADUC's "Find" option

7 Answers7

Linked