User Account Information

To view and modify the properties of a user account, double click on its icon or select it and press the [Ctrl]+[Enter] keys.

The EV Reach properties window can be used to view and modify the most common Active Directory attributes for a user object. If you need to view and manage an attribute not available from this window, click on the Native Property Window button to switch to the Users & Computers MMC Snap-in User property window.

To export the information into a file, click on the report button.

Managing User Group Memberships

Select the Groups tab to view and manage the user's group memberships.

Viewing Effective Group Members

By default, the Groups tab displays the direct memberships of the user. To view the full set of effective memberships of a user, enable the Show Effective Memberships option. Once enabled, every direct and indirect membership of the user is listed, and the Effective Via column displays the inheritance path of the membership.

Modifying Memberships

• Click on the Groups tab.
• Use the Add (see EV Reach Object Selector) and Remove buttons to manage the group memberships. You can also use the import | exportbutton to export the group memberships to a file or import the information from a group memberships file.

Viewing Account Statistics

The Statistics tab displays useful information about the current status of a user’s account.

Profile Statistics

If the user is configured with a roaming profile, this section displays the profile's last write time stamp as well as the user profile directory size. This information is useful to troubleshoot user profile related problems. For instance, an unusually large profile size results in longer login and logout times.

Login Statistics

This section displays the Last Logon information as well as the Successful Logon Count and the Bad Logon Count of the user. The Last Logon information is independently kept by every domain controller in a domain. Consequently, querying a single domain controller may not represent the most current data.

To retrieve accurate Last Logon information, click on the Query other DCs button. You are then presented with the list of Domain Controllers available in the user domain. Select the domain controllers to be queried and click on the Query button.

Password Statistics

Use this section to retrieve password age information. The number of days since the last password change is displayed as well as the password expiration status. The password expiration status is based on the domain account password policies. For instance, if the domain account policy dictates that password expires every 30 days, and the user's password is 25 days old, then the user's password will expire in 5 days.

To view and modify the domain account policies, click on the View Domain Policy button (see AD Account Administration).

User Login History

The Login History tab displays the logged-in workstation history recorded by EV Reach.  This section displays the event information of the last 25 logins. This is the default value. It can be set to any number via a group policy object registered login events for that user.

For the User Login history feature to work, the following requirements apply:

• A EV Reach Server
• Your user's machines must be equipped with the EV Reach Agents. Login History will build up over time as more EV Reach Agents are installed on your client machines (see Installing EV Reach Agents).

Once these requirements are met, an entry is recorded as soon as a user logs in and is updated once the user logs out.