We just upgraded from 7.3.1 to 7.5.3.
dynamic groups had execution host set to specific ARS servers to split processing load.

Part of upgrade requires a break in replication.  we upgraded one environment, and made it publisher in SQL.

doing this makes the…

Hello,

I am looking for ideas on how to best allow other IT team members to "unmap" Active Directory accounts from various Synchronization Service Workflows.  Currently only ARS Admins have the ability to do this but I would like to extend this…

2528 - "Rebuilding membership list of Dynamic Group started"

2587 - "Rebuilding membership list of Dynamic Group completed successfully"

We have ARS 7.3.1.0

I see those two EventID's when a Dynamic Group is auto rebuilt. However, no…

Hopefully a simple question:

My company recently upgraded to Active Roles 7.4, and I believe that we were using 7.0 prior to the recent change.

Is the Navigation Bar no longer collapsible in newer releases?  I have been unable to find the option, or any…

Have a problem, if the UPN change then  change Primary Mail Address and set the Old Primary Mail Address as an additional Email Address , how can I achieve this?

How to change one common attribute for multiples groups using csv.

i have around 2000+ groups which need to have a attribute updated. How can we achieve this.

Hi all,

I try to upgrade from 7.4.4 to 7.5.5 but failing on the prerequisite software installation.
Upgrade from 7.4.3 to 7.4.4, I did a /quiet install therefore I've skipped the prerequisite installation, but now I need the azure stuff in ARS, so I want…

We have 19 groups, say if user is added to 3 groups out of those 19. the WF should add that single user to another security group and execute the script or assign 0365 License.

can someone guide me a good approach to achieve this?

Hi, 

We have setup some new user automation however we would like to store the users initial password somewhere so that we can then send this via email to the IT Technician setting up the users account.

Does anyone know where this attribute is stored…

Hi,

Does anyone know if its possible to have two saved object properties in a single workflow. 

To give context, the first saved object is configured for "Workflow target" (i.e. the user) and targets email address, company etc. 

The second…

Is there a way to output the changes Synchronization Service will be making if you committed a workflow.

I know that I can click on the numbers and a grey window will pop up detailing the changes that would be made were I to hit commit on the workflow…

I have a few thousand users to apply a VA value to - in order for a DynamicGroup to pull them in as members.

Other than my normal practice, of looping through the list - is there an array way to feed set-qaduser an attributeValue append that would take…

Hello,

I want to create a dynamic group including all computers with a Distinguished Name containing "CRETEIL".
Unfortunately, the membership rule "Computer distinguishedName Contains CRETEIL" doesn't return any items while many computers have…

Hi all, this is probably a simple question, but I am trying to find out when a particular user logged into ARS. We use the web console for the majority of our admins and a few have the full client console. I am looking to see if a particular admin logged…

Hello,

I'm have tried below script in policy to uncheck and disable 'Create a mailbox' option in the contact creation wizard but its not reflecting on the screen.

function onGetEffectivePolicy($Request)
{
if($Request.Class -ne "contact"){return…

Hello,

I have two ARS managed domains which are in the same forest. Let's pretend domain1 and domain2.

I also have two groups, domain1\read-domain1 and domain2\read-domain2 which have the rights "All Objects - Read All Properties" respectiv…

Hello,

I have tried ARS access, it works but the following command does not work :

Connect-QADService -proxy
Connect-QADService : Server not exist or could not be contacted:
Au caractère Ligne:4 : 1
+ Connect-QADService -proxy
+ ~~~~~~~~~~~~~~~~~…

Anybody know how to use Replace with set-QADUser?

Trying to switch email suffix on users through a workflow. 

$workflow.ActivityTarget("CreateDev511Account") is the name of the activity target. The workflow creates a user earlier with the old…

Hi all,

I am new to One Identity products and possibly looking at purchasing Active Roles to automate new user requests from Service Now but I have a few questions that i hope you can help me with:

Environment

We currently create users on our on premise…

Hi

I created a workflow who move an account and send a notification when is done. We would like to have the subject of the email customized like " Operation done for 'John Doe' " for exemple.

But unfortunately to use to use an attribute…

How can I explicitly instruct ARS to execute scripts in PowerShell v7

Hi.

When in-place upgrade procedure is performed then ActiveRoles creates a new database each time ?

When I change current database I get the error - 

[InsertArServiceRecord] :Error Generated. Details: System.Data.SqlClient.SqlException (0x80131904): Violation…

Hello,

I am in version 7.4.3 with all the fixes.

I want to create a form to edit people in our AD with multiple tabs and dynamic lists. The anomaly is that when creating the form, I only have the choice to save and not next to go to the next tab. So dynamic…

Is there a way to specify a friendly name for the service connection point that ARS Administration service creates in AD?  We name our servers in a complex way (like aaa-bbb-ccc-###) and it would be nice if I could specify a name like (ars01 or ADManagement01…

Hello.

I need to generate a password for a user in a policy script.  I'd like the password to be compliant with the password policy I've already setup in ARS, and which is generated if I use the New User wizard from the ARS MMC console.  I don't…