• Computer Dynamic Group Membership Rule Distinguished Name


    I want to create a dynamic group including all computers with a Distinguished Name containing "CRETEIL".
    Unfortunately, the membership rule "Computer distinguishedName Contains CRETEIL" doesn't return any items while many computers have…

  • Cross domain members don't inherit group delegated rights


    I have two ARS managed domains which are in the same forest. Let's pretend domain1 and domain2.

    I also have two groups, domain1\read-domain1 and domain2\read-domain2 which have the rights "All Objects - Read All Properties" respectiv…

  • Set Active Roles (ARS) Scheduled (PowerShell) Script Modules to Execute in PWSH.exe (v6+) vs POWERSHELL.exe

    How can I explicitly instruct ARS to execute scripts in PowerShell v7

  • Web Interface crashes when enumerating large groups

    We are in the process of upgrading from ARS 6.9 to 7.3.3. We both versions running in parallel and are planning a cutover soon. However, on ARS 7.3.3, the web interface hangs and eventually crashes while attempting to enumerate large groups. For example…

  • New-QADUser cmdlet Issue when logging the account creation event

    So when using the new-qaduser cmdlet, see below, The Event Log for event 4720 on the DC its connecting to to create the user account shows:

    Security ID: Domain\testing3
    Account Name: $2RG100-UU7PKQ1Q51GA
    Account Domain: Domain

    SAM Account…

  • need help to list users with second owner in a csv file


    My Problem is, i have to list all Users in a specified OU, with entries in the Second Owner field.

    How i can do this and export in a CSV File?

    Would be great if someone could help.

    Thanks and best regard


  • Active Roles Upgrade - Slow SQL Replication

    During Active Roles upgrade to 7.2 version we caught such a problem:

    After deploying new change history databae on new server and configuring it as publisher we added a subscriber. 95% of database on publisher migrated during first hours, but the rest…

  • I want to create computer objects without accessing the ARS console

    I tried with the below code but it gives error.

    powershell.exe -command New-QADComputer -Name <Name of the new computer> -ParentContainer "<OU-Copied the distinguishedName of an earlier computer object from the AD>" -ObjectAttr…
  • Error while undo-deprovisioning users

    I got ARS upgraded to 7.4.3 upgraded to our test environment, during testing i found out i get an error while doing a undo-deprovionsing user from the Disabled Users - deprovionsined users container

    The error says 'Built-in Policy - Dynamic Groups' failed…

  • Set visibility of an entry in a form through PowerShell script

    Hi everyone,

    We have built a custom form in which fields are populated through a PowerShell script, ARS runs this script as you are opening the form.
    It is used to provide a view of bought Office 365 licenses by each of our subsidiaries local IT teams…

  • I find out which Shared Mailboxes a person has access to?

    This is probably as much an Exchange question as an Active Roles one, but is there any way to find out from Active Roles which Shared Mailboxes a user has access to?  We're sometimes asked to make a new user the same as an existing one and they don't always…

  • distribution list members -workflow

    I am trying to create a workflow to send a list of group members to the group owner every so often to validate correct group members.

  • Step Handlers - Synchronization Service

    Does anyone know how to use step handlers? The documentation barely even talks about them and no examples are given.

    I would like to take data from srcobj or dstobj and perform actions pre or post run. Is this not doable. In what forms are step handlers…

  • Quickconnect Deprovision from DB2 Table to Active Roles

    Source System: DB2 Table

    Destination: Active Roles Server

    I have the synchronization service read data from a table. This table is formed by user submission to deprovision accounts. From the sync server, I send a deprovision job over to Active Roles…

  • Unable to create Mailbox for newly created users using New QADUser command

    I would like to create Exchange Mailbox using powershell script using New-QADUser. In Script, i used few virtual attributes like 'edsva-MsExch-MailboxType'=1;'edsva-MsExch-ApplyEmailAddressPolicy'='TRUE';'edsva-MsExch-ArchiveMailboxEnabled'='FALSE' .…

  • Create Exchange User Mailbox - Quest Powershell

    Hi guys,

    I'm just looking to see if it's possible to create an exchange user mailbox using Quest AD Shell module within Powershell? I'm not familiar with QAD module and it's commands.

    In our current environment there is an option to "Create…

  • Running Workflows in parallel? Is this possible?

    Hello All,

    my customer asks, if it is possible to run workflows in parallel? If a new User is created, different attributes should be set by different people (e.g. mobile number, Telephone number ertc.). And it make no sense to set the telephone number…

  • Active Roles installation.


    This surely a silly question but is there a way to install and testing Active Roles in our infrastructure without making any changes to it during the installation?

    I know there is a free virtual trial option but was wondering if I can install it without…

  • Setting Virtual Attribute on the fly when user Properties are opened

    Hey Everyone,

    First post and still quite a newb with Active Roles so don't mind the brief ignorance you may see :)

    Basically my end goal is to make a Tab in the web interface User Object properties window only visible when a virtual attribute is…

  • Upgrade ARS 6.8 and Upgrad Server OS and SQL-Version - All in one step possible?

    Hello All,

    I have to upgrade ARS from Version 6.8 to an up-to-date Version. And I also have to update the Server OS and SQL-Version. For my understanding of the ARS update path document I first have to update to Version 6.9 before I can go to Version…

  • Working with group changes using Powershell


    Are there any example scripts floating around that show how to interact with changes made to groups using the script modules?

    I am fairly familiar with working with User objects and "onPreCreate", "OnPostCreate" etc, but I don't have any examples…

  • Using SET-QADUser to change CN attribute


    I need to update a bunch of users names to title case (John Smith). Currently everything is upper case.

    Set-QADUser -Identity "john.smith" -DisplayName "John Smith" -ObjectAttributes @{cn="John Smith"}

    Using the command…

  • UnDeprovision In ActiveRoles Sync Engine


    So I can see in the Sync Engine workflows (Old QC)  we have the ability to deprovision a user. we can deprovision if the user doesn't exist in the CSV file.. or trigger a Deprovision based on Field if we are pulling from SQL.

    However, I don…

  • ARS Scripts to PowerShell


    I am for some reason uninstalling ARS. But keeping the ARS scripts as they are still in work. So how do I convert ARS scripts in to PowerShell Scripts? Or is there any way to run the ARS Scripts Without ARS?



  • Workflow: Adding a user to a specific group and execute a script


    I want to create a workflow when a user is added to a specific security group (groupname "TestGroup") and than execute an action. What I already have is:

    1. Create the new Change Workflow (Done)
    2. Configure the Workflow Options and Start…