Sign in
 
HomeWindows Server “8” Beta20082003LibraryForums
Windows Server TechCenter > Windows Server Forums > Management > RSAT and the missing Attribute Editor tab [solution]

Discussion RSAT and the missing Attribute Editor tab [solution]

    •  
      Monday, April 21, 2008 3:23 PM
       
       
      Sign In to Vote
      3
      Sign In to Vote

       

      PROBLEM

      When you install RSAT on a Vista workstation or Server 2008 system, that is managing a 2000/2003 based forest, you do not see the Attribute Editor tab when looking at the properties of a User or Computer object in Active Directory Users and Computers(ADUC).

       

       

      MORE INFORMATION

      The Display Specifier is not updated in the Configuration Naming context, because the 2008 schema changes have not been executed on the forest. Part of the upgrade updates the forest Display Specifiers.  The Attribute Editor tab actually uses functions within the ADSIEDIT tool , more specifically the ADSIEDIT.DLL extension. Although the DLL is probably registered on the RSAT system, the ConfigNC need updating, in order to expose the tab in the ADUC interface.

       

      SOLUTION

      Use the ADSIEDIT tool (or other tool of choice...ADexplorer, LDP etc), with a user who has rights to modify the Configuration Naming Context.

      Navigate to cn=<languagepage>, cn=configuration, dc=<domainname>

                   (where <languagepage> is your relevant language...see http://support.microsoft.com/kb/324097)

                   (where <domainname> is your domain dn)

       

      Under the cn=User-Display object, edit AdminPropertyPages and add the line 11,{c7436f12-a27f-4cab-aaca-2bd27ed1b773}

       

      Under the cn=Computer-Display object, edit AdminPropertyPages and add the line 12,{c7436f12-a27f-4cab-aaca-2bd27ed1b773}

       

      Under the cn=Default-Display object, edit AdminPropertyPages and add the line 4,{c7436f12-a27f-4cab-aaca-2bd27ed1b773}

       

      Open ADUC from the Vista or Server 2008 and you should now see the Attribute Editor for the object you selected.  Note: Attribute editor is only shown when ADUC is in Advanced View.

       

      -Stuart Hudman
       

    All Replies

    • Tuesday, April 22, 2008 6:23 AM
       
       
      Sign In to Vote
      0
      Sign In to Vote

      Hi,

       

      Thank you very much for the information shared. As this is a knowledge sharing instead of a post for answer, we will change this issue type from "Question" to "Comment". It will help other community members to find your knowledge sharing easier.
       
      If I misunderstood your concern, please feel free to change the type back to "Question".

       

      Thanks!

       
    • Monday, September 27, 2010 8:38 AM
       
       
      Sign In to Vote
      1
      Sign In to Vote

      I checked these values on our AD and can confirm that all the values are there as you indicated. But though, we are missing attribute editor tab on all objects (e.g user) when an object is viewed after serching from ADUC (from all of our Win2008R2 DCs)

      Attribute editor tab is visible if we see the properties directly in ADUC by clicking on an object, without searching

      Advanced View is turned on.

       Thx, -Bab.

       
    • Thursday, September 30, 2010 9:25 PM
       
       
      Sign In to Vote
      0
      Sign In to Vote

      I checked these values on our AD and can confirm that all the values are there as you indicated. But though, we are missing attribute editor tab on all objects (e.g user) when an object is viewed after serching from ADUC (from all of our Win2008R2 DCs)

      Attribute editor tab is visible if we see the properties directly in ADUC by clicking on an object, without searching

      Advanced View is turned on.

       Thx, -Bab.


      Same exact thing happens to me..

      If I browse the tree and double click a user in the right pane I see the Attribute Editor, if I do a "Find" and open the user I don't see the Attribute Editor

       
    • Thursday, November 04, 2010 10:49 AM
       
       
      Sign In to Vote
      0
      Sign In to Vote
      I think its "security feature". You cant see all properties from search window.
       
    • Tuesday, November 09, 2010 10:16 PM
       
       
      Sign In to Vote
      1
      Sign In to Vote
      Is it possible to enable it so that you can use the attribute editor when you have done a search for an object? Would make it easier so that we dont have to seach for i.e. a computer object first, then look at the object tab to find its location, then manually browse the computer to get the attribute editor up.
       
    • Wednesday, August 03, 2011 6:37 PM
       
       
      Sign In to Vote
      0
      Sign In to Vote
      Has anyone ever answered that question?
       
    • Monday, November 14, 2011 5:38 PM
       
       
      Sign In to Vote
      0
      Sign In to Vote
      Bump.... I am looking for this resolution as well.
       
    • Friday, November 18, 2011 7:46 AM
       
       
      Sign In to Vote
      0
      Sign In to Vote

      Hi All,

      Is there any way to hide Attribute editor tab for all users except domain admins? 

      I don't want to give anyone to see this tab, but it is useful for me. 

       

      Thanks for any idea...

       

      P

       

       

       
    • Thursday, March 29, 2012 1:00 PM
       
       
      Sign In to Vote
      0
      Sign In to Vote
      Any "solution" to this "security feature"? We almost never navigate out to a user but perform a search. To then not be able to update that user from the Attribute Editor seems pretty odd. 
       
    • Thursday, April 19, 2012 8:50 AM
       
       
      Sign In to Vote
      0
      Sign In to Vote

      "I think it's security feature" is not the same that "it's security feature".

      with ADexplorer you can search an user and modify their attributes.