I'm managing a large Active Directory (AD) environment with over 5,000 users, and we've noticed a lot of essential information is missing for many employees. We're looking for a user-friendly on-premise tool that would allow managers to update details for their direct reports easily. Specifically, we want a tool that can help managers "build their team" by selecting their direct reports and flagging any inaccuracies based on the AD 'Manager' attribute. Additionally, it should enable users to update their profiles, such as uploading a photo, submitting their job title and location, and setting their manager, with all these changes going to the respective manager for approval. We use O365, and while some photos are uploaded there, we require manager approval for photos since they also need to be in AD for integration with other systems like Door Access. Any suggestions for tools that could handle this?
4 Answers
Honestly, I’d be cautious about allowing managers or non-IT personnel to edit AD directly. In my experience, they often forget or neglect updates, which can cause issues later. It might be safer to get an XLS from HR and map that to your AD fields, then update using PowerShell as a one-time exercise. Start small to confirm everything’s correct. I'd also recommend looking into a comprehensive HR system like Workday to help manage user provisioning in the long run.
Hyperfish is another tool you could check out. It's designed for making user changes with approval workflows. It might fit your needs for letting users submit updates while keeping managers in the loop for approvals, though I haven't had the chance to use it myself.
You might consider a Custom MMC with Taskpad, but that's pretty retro. It might not have the modern support and features you need.
Adaxes could be a solid option for this. It offers a web interface that lets managers maintain their direct reports, making it more user-friendly for them.
Thanks! I hadn't heard of it before.
I'm aiming for something more stable and backed up in terms of support, so that's a bit old-school for me.