You open Active Directory Users and Computers, use Find to search for a user, double-click the result, and go looking for the Attribute Editor tab to check or edit a raw attribute. It isn't there. The tab you use every week has quietly vanished.
Nothing is broken. This is a known quirk in ADUC, and there's a quick trick to get the tab back without hunting through the OU tree. Here's why it happens and the fastest way around it.
Quick answer
When you open a user from the Find results in ADUC, the Attribute Editor tab is missing. Open the user, go to Member Of, open one of their groups, then reopen the user from that group member list. The tab comes back. Turn on Advanced Features first, or the tab never shows at all.
First check: is Advanced Features on?
Before blaming the search bug, rule out the obvious. The Attribute Editor tab only appears when Advanced Features is enabled. In ADUC, open the View menu and make sure Advanced Features is ticked.
If it was off, turning it on brings the tab back everywhere and you're done. If it's already on and the tab is still missing from search results, you've hit the actual bug.
Why the tab disappears from Find results
This is a long-standing quirk, not something wrong with your setup. When you open an object straight from the Find dialog, ADUC loads a trimmed-down property sheet. It drops the Attribute Editor tab and any tabs added by extensions, such as the ones Services for UNIX used to add.
Open the same user by browsing to it in the OU tree and every tab is there. It's only the search path that loses them. Microsoft has said this won't be fixed, because ADUC is being left as-is while new work goes into the Active Directory Administrative Center.
The Member Of trick
This is the fastest fix and needs nothing extra installed. The idea is to reach the user through a group's member list instead of through search, because that path keeps the full property sheet.
- Search for the user with Find and open their properties.
- Go to the Member Of tab and double-click one of the groups they belong to. A smaller group is easier to work with than Domain Users.
- Close the user window. This step matters, so don't skip it.
- In the group's Members list, find the same user and double-click to open them again.
- The Attribute Editor tab is now there.
It feels like a detour, but it takes a few seconds once you've done it a couple of times.
Two other ways to get there
The Member Of trick fails if the user has no useful group memberships, so it helps to know the alternatives.
Saved query with an LDAP filter
Right-click Saved Queries, create a new query, choose Custom Search, and on the Advanced tab enter an LDAP filter such as:
(&(objectCategory=person)(objectClass=user)(name=t-horak*))
Open a user from the query results and the advanced tabs, including Attribute Editor, are all present. Saved queries are reusable, so this is worth setting up once if you edit attributes often.
Use the Active Directory Administrative Center
ADAC doesn't have this bug. Search for the user there, open it, and the attribute editor is built into the properties view. Since this is where Microsoft is putting its effort, it's a good habit to shift attribute work into ADAC anyway.
Which method to use
| Situation | Best method |
|---|---|
| Tab missing everywhere | Turn on View > Advanced Features |
| One-off edit, user has groups | The Member Of trick |
| You edit attributes often | A saved query with an LDAP filter |
| To skip the bug entirely | Do it in ADAC instead |
If you work in Active Directory a lot, you may like my free IT tools, including an IPv4 subnet calculator and a Linux chmod calculator.
Frequently asked questions
Why is the Attribute Editor tab missing in ADUC?
Two reasons. Either Advanced Features is off in the View menu, or you opened the object from the Find dialog, which loads a reduced property sheet that drops the tab. Opening the object from the OU tree or a group member list shows it.
Does this mean something is wrong with my AD?
No. It is a known behaviour in ADUC itself, not a sign of a problem with your domain or the account. The same user opened a different way shows every tab.
Is there a permanent fix?
Not for ADUC. Microsoft has said it will not be fixed because the tool is deprecated. Use the Member Of trick, a saved query, or do the work in the Active Directory Administrative Center.
How do I turn on Advanced Features?
In ADUC, open the View menu and tick Advanced Features. This reveals the Attribute Editor tab and extra containers like System and Program Data.

No comments:
Post a Comment
Comments are moderated. Questions and corrections are welcome; spam and promotional links are removed.