Managing Users
The Users page
Section titled “The Users page”Click Users in the left navigation. The page has two panels:
- Left panel — OU tree and user list with search and filter controls
- Right panel — action panel for the selected account(s)
Browsing accounts
Section titled “Browsing accounts”The OU tree on the left mirrors your directory structure. Click an OU to scope the user list to that container (and all sub-OUs). Click the root node to see all accounts in scope.
Searching
Section titled “Searching”Type in the search bar at the top of the user list to filter by display name, SAMAccountName, or email address. The search is live — results narrow as you type.
Filtering by status
Section titled “Filtering by status”Use the Status filter chips above the user list to show only accounts matching a state:
| Filter | Shows |
|---|---|
| All | Every account in scope |
| Active | Enabled accounts with no issues |
| Locked | Accounts currently locked out |
| Disabled | Deactivated accounts |
| Risky | Accounts with an elevated risk score |
Selecting accounts
Section titled “Selecting accounts”- Single select — click a row.
- Multi-select — hold Ctrl and click additional rows, or click one row then Shift+click another to select a range.
- Select all visible — press Ctrl+A.
The action panel on the right updates to show actions available for your selection.
The safety lock
Section titled “The safety lock”The safety lock prevents accidental bulk writes. Before any write action is available, you must click the lock icon in the action panel and confirm the prompt. The lock re-engages automatically after each action.
Forest-critical accounts (Domain Admins, Enterprise Admins, krbtgt, and similar) cannot be unlocked by the safety lock — they are permanently protected.
Available actions
Section titled “Available actions”| Action | What it does |
|---|---|
| Unlock account | Clears lockoutTime on the selected account(s) |
| Enable account | Sets userAccountControl to enabled |
| Disable account | Sets userAccountControl to disabled |
| Reset password | Forces a password reset at next logon |
| Password never expires | Toggles the DONT_EXPIRE_PASSWORD flag on or off |
All actions are recorded immediately in the Audit Log.
Account detail pane
Section titled “Account detail pane”Click the chevron on a selected row (or double-click the row) to expand the detail pane. It shows:
- Display name, SAMAccountName, email, title, department
- Account status and last logon date
- Risk score and the contributing factors
- The last 5 audit entries for that account