Directory administrator allows you to:

• Add, remove and modify users and groups
  You can add and remove users and groups from your directory. Creating a new user/group is a simple follow-the-wizard process, that asks you for the required information, and proceeds with the creation. Double-clicking on a user/group icon opens a Properties dialog with the element's information in it.
• Deal with group memberships
  Directory administrator lets you add and remove members from a group, as well as changing the primary group of a user account. All this with drag-and-drop.
• Change user passwords
  You can change the password for any user (but not read it), and it will be saved with the proper encryption procedures, both for Windows filesharing and UNIX networks.
• Set password policies
  As supported by the Name Service Switch and PAM, you can set and change password expiration policies, set an expiry date on the user account, or disable the account.
• Set a login shell and home directory
  You can also change traditional UNIX information of users in your directory.
• Manage corporate information (department, e-mail address, phone numbers, city, state, employee code)
  You can register detailed information on who's who in your company, and use it as a corporate address book in most popular e-mail/Webmail clients.

Directory administrator also has support for recent LDAP standards, such as:

• Setting host-based access control policies (supported by PAM_LDAP)
  Directory administrator supports the use of host records to allow or deny login to users based on hosts.
• Managing email routing information (supported by Postfix and other mail servers)
  If properly configured, most e-mail MTAs will use this information to route, forward and deliver mail for each user.