Tag: How to configure User Account Setup

NOTE: Only SharePoint groups and permission levels that exist in the site where the Bamboo User Account Setup Web Part instance resides will be available.

• Administrator User Name:
  • Active Directory Service: Enter the user name for the domain administrator who has the appropriate rights for creating Active Directory users.
  • Local Server User Group: Enter the user name for the machine administrator (i.e. member of the Administrators group on the local NT machine).
  • This Administrator account must have the permission to add users to the selected SharePoint groups.
• Administrator Password: Enter the password for the administrative account that will be used to actually create the user account in Active Directory or Local NT Server User Group.

NOTE: Passwords are generally case-sensitive.

• Administrator Domain: Enter the domain where this Administrator account resides.
• Use logged in user’s account instead of the Administrative Account to add users in SharePoint: Select this check box to use the logged in user’s account (i.e. impersonation) to add users in SharePoint. The logged in user must have permission to add users to the selected SharePoint groups.
• Allow Web Part to be importable: Select this check box to allow this Web Part to be exported and imported (i.e. added to a page or site) with all the configuration settings intact in the DWP file that is created upon export. By default, this check box is not selected so that the User Account Setup Web Part cannot be exported and imported to another page or site with all the configuration information intact. Checking this option also enables you to include this Web Part as part of a site template so that this configured Web Part is automatically available to users when creating a new SharePoint site.

• Directory Services Provider: Select either Active Directory Services or NT Directory Services.
• Where are new users added?: Expand this section to configure whether users are created in SharePoint Groups, Permission Levels or both.
  
  If you select SharePoint Groups only, then you must select where you want to get the SharePoint groups (including custom groups) from (the current site or the entire site collection), then select the groups the Web Part user can add users to.
  
  If you select SharePoint Groups and Permission Levels, then you must select where you want to get the SharePoint groups (including custom groups) from (the current site or the entire site collection), select the groups the Web Part user can add users to, then select the Permission Level(s) that can be granted to new users.
  
  Who Can Create New Users?: Expand this section to configure the groups (including custom groups) and permission levels required for Web Part users to create new users.
  

If you selected Active Directory as your directory services provider, then the Active Directory Properties section is available for you to configure.

• Domain Name: Enter the full qualified domain name where the new accounts will be added to. For example: marketing.company.com or domain.local
• Cannot Change Password: If this option is selected, users created via the Web Part will not be able to change their password.
• Password Never Expires: If this option is selected, users created via the Web Part will never be forced to change their password.
• Change Password at Next Login: If this option is selected, users created via the Web Part will be required to change their password the first time they log in. This option cannot be selected if either Cannot Change Password or Password Never Expires is active.

• Disable Account: If this option is selected, new accounts will be disabled by default.
  Organizational Unit Selection Options.

  • Add all user accounts beneath the following Organizational Unit: Enter the path to the Organizational Unit where you want to create new users.

    NOTE: If you have organizational units within organizational units, enter with back slashes between the units starting with the parent unit. For example, if you have a unit called Users and then you have Reston under that and then Sunset Hills Office under the Reston unit, then it would be entered in as follows: UsersRestonSunset Hills Office.

  • Allow users to select Organizational Unit and Group membership per user account: Enter the path to the Organizational Unit that contains sub units to display to Web Part users as they create new users. Web Part users will be able to select from the sub-units for a location for adding new users. If you leave this text box blank, all organizational units in the domain are available for selection to the Web Part user.
    
  • Allow users to be added to these Active Directory Groups: Click the Apply button on the tool pane to retrieve the list of Active Directory groups. You must enter in a fully qualified domain name prior to this step.

• Retrieve the Sub-Organizational Units from Active Directory
  

  • Select the One Time option to provide a static set of sub-organizational units for use by Web Part users. This option may enhance Web Part performance but does not provide automatic updates to changes to the sub-organizational units list.

  • Select the Dynamically option to have the Web Part continuously update the sub-organizational units, ensuring that the latest changes to the units are available to Web Part users. This option may impact performance.
    

    ---

If you selected NT Directory as your directory services provider, then the NT Directory Properties section is available for you to configure.

• User accounts are added to this server: Enter the server name of where the new user accounts will be added to. For example: MyServerName

• Enforce Complex Password Policy: The User Account Setup Web Part cannot determine whether the SharePoint server requires a complex password policy when using NT Directory Services as you directory provider. Select this check box if you want to enforce a complex password policy based on Active Directory Services complex password policy and display this policy in the Web Part.

• Cannot Change Password: If this option is selected, users created via the Web Part will not be able to change their password.
• Password Never Expires: If this option is selected, users created via the Web Part will never be forced to change their password.
• Change Password at Next Login: If this option is selected, users created via the Web Part will be required to change their password the first time they log in. This option cannot be selected if either Cannot Change Password or Password Never Expires is active.
• Disable Account: If this option is selected, new accounts will be disabled by default.
• Select NT Directory Groups where new user accounts are added: Select an NT Directory group(s) where new user accounts will be added to.

• Send notification E-mail to new user: Select this check box to have an email automatically sent to the new user notifying them that their account has been created. The Web Part will send the e-mail to the email address in the newly created user account. When you check this box, additional email properties are displayed for further configuration.
• SMTP Server Name: Enter the name of the SMTP server.
• Notification E-mail From Address: Enter the email address that you want the email to be sent from.
• Notification E-mail Subject: Enter the subject for the email notification.
• Notification E-mail Message: Enter the body text for the email notification. Click in the text box and then click the icon to the right of the text box to expand the field to write the text.
• Include User Name and Password in E-mail: Select this check box to include the user name and password in the E-mail notification.

To add or update a default value for an attribute, click the Edit button and update the Default Value field.

• If your default value is intended to be only an example, enter text and leave the Editable option in the Field Settings section selected. For example, you could describe the required format for an email address using the default text [email protected].
• To base the default value on another attribute, enter the display name of the attribute you want to include. Use the format [Display Name] (including the brackets). The value will be updated as text is typed in the Web Part field you referenced. When using this feature, you must also deselect the Editable option in the Field Settings section.
• Multiple attribute name tokens are allowed, and text and tokens can be combined. For example, a default email address can be constructed using [First Name].[Last Name] @company.com
  [First Name] and [Last Name] will be replaced as values for those attributes that are typed in the Web Part.

For example, to include the display name of the new account in the email body, enter the substitution variable {Display Name} (including the brackets) in the text. To send approval and confirmation messages without HTML formatting, select the Send e-mail in plain text option.