Home > Uncategorized > ‘Invisible’ Users in SBS

‘Invisible’ Users in SBS

So if you’ve come on one of my SBS courses, you’ll be more than aware of “Golden Rule #1 and #2”.
Namely, thou shall use the SBS Console wherever possible, and use the wizards, even if you *think* you know best!

So, this doesn’t apply to you.
If however, you have a “friend” that did not follow that advice, and instead created a user account in AD Users & Computers (or other admin utility other than the SBS Console), then you will know that the user(s) will not appear in the console for you to administer.

How do I resolve this?
First, promise never to do this again, then I shall let you know….

Promise?….

OK.
There’s an attribute in AD that controls this behaviour. It’s called “msSBSCreationState” which will normally be populated with the string “Created” for SBS users. In the case of users created outside of the SBS console, this will not be set.
You can set it via ADSIEdit and browse down to each user, get up the properties and make this change manually.

Alternatively, use the AD module in PowerShell. Use this example to help.

get-aduser -searchbase ‘ou=test,dc=contoso,dc=local’ -filter * | set-aduser -add @{msSBSCreationState=”Created”}

This will enumerate all users in the “test” OU in the Contoso.com domain, and give them the required attribute.

Enjoy!

Advertisements
Categories: Uncategorized Tags:
  1. Rutger
    June 20, 2012 at 2:33 pm

    chrisreboot ! Rules !

    Thank You.Thank You.Thank You.Thank You.Thank You.Thank You.Thank You.Thank You.Thank You.Thank You.Thank You.Thank You.Thank You.Thank You.Thank You.

    That did the trick, for some odd reason it is not possible to display the attribute tab for the user accounts SBS 2011.

  2. June 20, 2012 at 6:59 pm

    My pleasure. Glad to help.

  3. Trea
    September 20, 2012 at 3:40 pm

    Awesome, thanks! I was doing this manually with ADSIEdit until I found this post. You (and Power Shell) rock!

  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: