Skip to content

ADUC Attribute Editor Tab Missing? The Quick Fix

By Bikram Bhujel

You open Active Directory Users and Computers, use Find to search for a user, double-click the result, and go looking for the Attribute Editor tab to check or edit a raw attribute. It isn't there. The tab you use every week has quietly vanished.

Nothing is broken. This is a known quirk in ADUC, and there's a quick trick to get the tab back without hunting through the OU tree. Here's why it happens and the fastest way around it.

Three steps to restore the missing Attribute Editor tab in ADUC: find the user, open one of their groups from Member Of, then reopen the user from the group member list

Quick answer

When you open a user from the Find results in ADUC, the Attribute Editor tab is missing. Open the user, go to Member Of, open one of their groups, then reopen the user from that group member list. The tab comes back. Turn on Advanced Features first, or the tab never shows at all.

First check: is Advanced Features on?

Before blaming the search bug, rule out the obvious. The Attribute Editor tab only appears when Advanced Features is enabled. In ADUC, open the View menu and make sure Advanced Features is ticked.

If it was off, turning it on brings the tab back everywhere and you're done. If it's already on and the tab is still missing from search results, you've hit the actual bug.

Why the tab disappears from Find results

This is a long-standing quirk, not something wrong with your setup. When you open an object straight from the Find dialog, ADUC loads a trimmed-down property sheet. It drops the Attribute Editor tab and any tabs added by extensions, such as the ones Services for UNIX used to add.

Open the same user by browsing to it in the OU tree and every tab is there. It's only the search path that loses them. Microsoft has said this won't be fixed, because ADUC is being left as-is while new work goes into the Active Directory Administrative Center.

The Member Of trick

This is the fastest fix and needs nothing extra installed. The idea is to reach the user through a group's member list instead of through search, because that path keeps the full property sheet.

  1. Search for the user with Find and open their properties.
  2. Go to the Member Of tab and double-click one of the groups they belong to. A smaller group is easier to work with than Domain Users.
  3. Close the user window. This step matters, so don't skip it.
  4. In the group's Members list, find the same user and double-click to open them again.
  5. The Attribute Editor tab is now there.

It feels like a detour, but it takes a few seconds once you've done it a couple of times.

Two other ways to get there

The Member Of trick fails if the user has no useful group memberships, so it helps to know the alternatives.

Saved query with an LDAP filter

Right-click Saved Queries, create a new query, choose Custom Search, and on the Advanced tab enter an LDAP filter such as:

(&(objectCategory=person)(objectClass=user)(name=t-horak*))

Open a user from the query results and the advanced tabs, including Attribute Editor, are all present. Saved queries are reusable, so this is worth setting up once if you edit attributes often.

Use the Active Directory Administrative Center

ADAC doesn't have this bug. Search for the user there, open it, and the attribute editor is built into the properties view. Since this is where Microsoft is putting its effort, it's a good habit to shift attribute work into ADAC anyway.

Which method to use

SituationBest method
Tab missing everywhereTurn on View > Advanced Features
One-off edit, user has groupsThe Member Of trick
You edit attributes oftenA saved query with an LDAP filter
To skip the bug entirelyDo it in ADAC instead

If you work in Active Directory a lot, you may like my free IT tools, including an IPv4 subnet calculator and a Linux chmod calculator.

Frequently asked questions

Why is the Attribute Editor tab missing in ADUC?

Two reasons. Either Advanced Features is off in the View menu, or you opened the object from the Find dialog, which loads a reduced property sheet that drops the tab. Opening the object from the OU tree or a group member list shows it.

Does this mean something is wrong with my AD?

No. It is a known behaviour in ADUC itself, not a sign of a problem with your domain or the account. The same user opened a different way shows every tab.

Is there a permanent fix?

Not for ADUC. Microsoft has said it will not be fixed because the tool is deprecated. Use the Member Of trick, a saved query, or do the work in the Active Directory Administrative Center.

How do I turn on Advanced Features?

In ADUC, open the View menu and tick Advanced Features. This reveals the Attribute Editor tab and extra containers like System and Program Data.

No comments:

Post a Comment

Comments are moderated. Questions and corrections are welcome; spam and promotional links are removed.