• Working with Attributes from $Request

    I'm trying to get information from $Request variable in Active Roles.

    When a user edits/changes attributes on their user account via the ARWebSelfService web portal, it triggers a workflow which performs a number of checks on the data and includes…

  • Unable to modify attribute in onPostCreate

    Hello,

    I am trying to modify the attribute ""edsvaSendAsTrustees" in $DirObj in the function onPostCreate. My PowerShell function that is called in the onPostCreate looks like this:

    #===================================================…
  • onPostModify Is there a way to retrieve a list of all attributes that were modified?

    I attempted to use $Request.RequestedAttributes in the script but onPostModify this is blank. I've looked through the SDK and Sample Scripts on the oneidentity website and haven't found anything that does this. Does anyone have any ideas?

    I just…

  • Can't Access Saved Object Properties from Script / Counter Returns Empty

    Hi,

    We're trying to create a workflow that counts every time a user enables or disables another user every day (workflow trigger is the modifivation of edsaAccountIsDisabled). (the counter resets every day.) If the counter reaches 20, the action requires…

  • Workflows with if-then, PowerShell scripts, and $work.SavedObjectProperies

    Hi,

    I am working on a workflow to do some automation on our computer objects, and I am running into a weird issue that I am struggling to wrap my head around.

    The error I am receive:

    Executing the 'Run script: DEV New Computer Object Tag Location on…

  • How to change one common attribute for multiples groups using csv.

    How to change one common attribute for multiples groups using csv.

    i have around 2000+ groups which need to have a attribute updated. How can we achieve this.

  • Assign add/remove group members permissions to AD group via script

    Hi Guys, how do I assign add/remove group members permissions to AD group via script? I know we can do it via set-acl command in Powershell, however how can we do it via script in QAD?

    I need to assign permissions to over 100 groups, and thus much easier…

  • Pull a value out of policy or enforce a policy on one user.

    My goal is to look at the policy applied to an object and pull a value the policy would set.

    Specifically, I'd like to pull homePath and homeDirectory out of the Home Folder and AutoProvisioning Policy applied to a user object.


    This looks close to…

  • Temporary group membership

    HI,  I would like to add a group by midnight through a script, I know the GUI has the setting to set date and time but how would I do it using a script.

    Command:

    Add-QADgroupmember -identity "groupname" -member $ADuser   (tonight at midnight)

  • Create Virtual Attribute Script?

    Need to create a bunch of Virtual Attributes. All single value Directory String, User attributes. Does any one have a script to create virtual attributes of a csv file or similar?

    I am not finding any of the Quest CmdLets that do it. 

  • Set Active Roles (ARS) Scheduled (PowerShell) Script Modules to Execute in PWSH.exe (v6+) vs POWERSHELL.exe

    How can I explicitly instruct ARS to execute scripts in PowerShell v7

  • New-QADUser cmdlet Issue when logging the account creation event

    So when using the new-qaduser cmdlet, see below, The Event Log for event 4720 on the DC its connecting to to create the user account shows:

    Security ID: Domain\testing3
    Account Name: $2RG100-UU7PKQ1Q51GA
    Account Domain: Domain

    Attributes:
    SAM Account…

  • Using a custom password generation script

    Hi,

    I would like to use a custom password generation script written using powershell.

    The custom script is essential just a copy of the default, but I swapped the "New-Password" function with my own and then deleted some of the other checks the default…

  • ARS Scripts to PowerShell

    Hi,

    I am for some reason uninstalling ARS. But keeping the ARS scripts as they are still in work. So how do I convert ARS scripts in to PowerShell Scripts? Or is there any way to run the ARS Scripts Without ARS?

    Thanks,

    zzeet

  • ARS PowerShell script to "Move" users from one group to another.

    I have a .csv with 2 columns. Column 1 is called SourceGroup with a list of groups, and the other is DestinationGroup with a different list. I have a script I am trying to use that will Add the users from SourceGroup to the DestinationGroup, after the…

  • Create Managed Units and link Access Templates to Managed Unit by script or PowerShell

    Hello,

    I have a very large client with a very flat AD structure, would it be possible to script the creation of Managed Units and link Access templates to the Managed Units?

    Also is there any recommendations about the number of managed units to have…

  • Change/replace SIP address from the edsvaOffice365-UserID field

    Ill start off by saying I am a complete novice

    I would like to change user SIP address with the field edsvaOffice365-UserID

    Id also like to be able to update this by OU if possible

    I am using Quest Commandlet to pull this information. Get-QADUser -SearchRoot…

  • Error in workflow - need help works in powershell

    I can run this in Powershell no issues, would appropriate any help.  I am writing how many days left until an account expires to a VA.

    THE CAUSE
    $Expiration
    = (([datetime]::FromFileTime((Get-ADUser Identity $user -Properties "msDS-UserPasswordExpiryTimeComputed…
  • Script for Quest Powershell in order to pull data from AD

    Hi All, im new to powershell and need to extract out some data.

    I would like to extract below attributes from AD for a User. Could you please help me in fixing the script.


    Get-QADUser t70869 | select -ObjectAttributes samAccountName, givenName, sn, displayName…

  • Searching and exporting account information from Active Directory

    I would like to do the following with AD accounts:

    Export the following fields from Active Directory to an Excel sheet with the appropriate headers:

    Under AD Account's General Tab: First Name, Last name, Display Name, Description, Office, Telephone Number…