How to change the description set on disabled users by the ADC (288084)

Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SUMMARY

When the Active Directory Connector (ADC) creates disabled accounts in Active Directory, the description of the account is set to Disabled Windows User Account. This behavior occurs so that the administrator knows that this account is not meant to be used as a logon-enabled account, but that it was created by the ADC to import mailbox information from an Exchange 5.5 directory.

MORE INFORMATION

It is possible to change the behavior of the ADC to either leave the description blank, or to write a different description when creating a disabled user account. To do so, add a value to the registry on the computer that is running the ADC, and then set the value to the desired description:

Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

Start Registry Editor (Regedt32.exe).
Locate the following key in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSADC\Parameters\
On the Edit menu, click Add Value, and then add the following registry value:
Value Name: Disabled Windows User Account Description
Data Type: REG_SZ
Value: (Your Description Here)
Quit Registry Editor.

If you set a blank in the value, then the ADC will not write any description on the disabled user.

Note Making these changes modifies the behavior of any new accounts that will be created and does not modify any existing accounts that have been created by the ADC. You must restart the Active Directory Connector service before the registry key will take effect.