• Computer Dynamic Group Membership Rule Distinguished Name

    Hello,

    I want to create a dynamic group including all computers with a Distinguished Name containing "CRETEIL".
    Unfortunately, the membership rule "Computer distinguishedName Contains CRETEIL" doesn't return any items while many computers have…

  • Cross domain members don't inherit group delegated rights

    Hello,

    I have two ARS managed domains which are in the same forest. Let's pretend domain1 and domain2.

    I also have two groups, domain1\read-domain1 and domain2\read-domain2 which have the rights "All Objects - Read All Properties" respectiv…

  • Set Active Roles (ARS) Scheduled (PowerShell) Script Modules to Execute in PWSH.exe (v6+) vs POWERSHELL.exe

    How can I explicitly instruct ARS to execute scripts in PowerShell v7

  • I want to create computer objects without accessing the ARS console

    I tried with the below code but it gives error.

    powershell.exe -command New-QADComputer -Name <Name of the new computer> -ParentContainer "<OU-Copied the distinguishedName of an earlier computer object from the AD>" -ObjectAttr…

  • Setting Virtual Attribute on the fly when user Properties are opened

    Hey Everyone,

    First post and still quite a newb with Active Roles so don't mind the brief ignorance you may see :)

    Basically my end goal is to make a Tab in the web interface User Object properties window only visible when a virtual attribute is…

  • Upgrade ARS 6.8 and Upgrad Server OS and SQL-Version - All in one step possible?

    Hello All,

    I have to upgrade ARS from Version 6.8 to an up-to-date Version. And I also have to update the Server OS and SQL-Version. For my understanding of the ARS update path document I first have to update to Version 6.9 before I can go to Version…

  • UnDeprovision In ActiveRoles Sync Engine

    Hello, 

    So I can see in the Sync Engine workflows (Old QC)  we have the ability to deprovision a user. we can deprovision if the user doesn't exist in the CSV file.. or trigger a Deprovision based on Field if we are pulling from SQL.

    However, I don…

  • ARS Quesry Based Distribution Group

    Is it possible to create a query based distribution group where the LDAP query compares two attributes and adds a user to the group if they are not the same?

    The two attributes that I want to compare are 'mail' and a virtual attribute 'edsvaFirstEmailAddress…

  • Workflow - How to set an attribute to the secondary owner's e-mail address of workflow target?

    Hi everyone,

    Does anyone know how I can set an attribute of my choice, to the e-mail address of the secondary owner of the workflow target? 

    So far, I have the following: 

    >>Operation execution: Create User; where secondary owner of workflow target is not…

  • Active Roles 7.2.1 and Collector public hotfix (KB 250838)

    Active Roles 7.2.1 public hotfix is now available on the Support portal (KB 250838).

    https://support.oneidentity.com/kb/250838

    This hotfix package addresses several issues with Active Roles 7.2.1 and the Collector and Report pack.

  • How can I stop ARS from detecting my on-premise exchange environment? I do NOT want any mail options available at all.

    Currently using ARS 7.2.1 in a hybrid environment with on-premise Exchange and O365.  ARS is currently detecting the on-prem exchange environment and causing a few minor issues.  Is there a way to stop ARS from detecting the on-prem exchange environment…

  • ActiveRoles Managed DLs in O365

    Is there a way or ARS Powershell script to bulk change on-prem MS Exchange DLs to ActiveRole managed DLs in O365.

  • Is there a way to successfully update the MemberOf field using Synchronization Service?

    We would like to use Synch Service to update user's group membership from a SQL DB, instead of manually adding groups. We get the below message and found a KB article that says to create a virtual attribute for each group, but this workflow will apply…

  • change user password via workflow

    I would like to automate the KRBTGT user password reset via a workflow as a countermeasure to the Golden ticket problem.

    I've tried to set up a workflow that makes works as follow

     

    search activity looks for users  in active directory with condition samaccountname…

  • How to remove breadcrumbs

    I am recreating all my site and want to know how to remove breadcrumbs and the tree view Tab in the new web interface in version 7.2

  • Script a different person in a notification other than manager

    I am creating a user and trying to use the notification task in a workflow but i need a way to add a different person other than a manager to send to.  I have a virtual attrib that has a sam account name that would like to send the notification to.  the…

  • New Active Roles Policy

    Hi,

    We want to add 2 new policy's on user creation these are

    Property Generation and Validation

    . accountExpires (accountExpires)

    .edsaMemberOf (edsaMemberOf)

     

    But we want them to be optional not Must be specifed, how can this be done?

     

    regards,

    B…

  • New Active Roles Policies

    Hi,

    We want to add 2 new policy's on user creation these are

    Property Generation and Validation

    . accountExpires (accountExpires)

    .edsaMemberOf (edsaMemberOf)

     

    But we want them to be optional not Must be specifed, how can this be done?

     

    regards,

    B…

  • Use ARS and/or powershell to create groups - nested & add members automatically?

    We use the lousy nested structure for shared folder ntfs permissions where a domain local group contains a universal which contains a global and the global has the users.  I want to find a way to create the 3 groups required when a new folder is setup…

  • Searching and exporting account information from Active Directory

    I would like to do the following with AD accounts:

    Export the following fields from Active Directory to an Excel sheet with the appropriate headers:

    Under AD Account's General Tab: First Name, Last name, Display Name, Description, Office, Telephone Number…

  • Possible to create custom handlers?

    In ARS 7, it appears there has been an implantation of a directory "Handlers". Since the sidebar navigation doesn't allow me to append DN to anything, this allows me to put ~/Handlers/MyAccount.ashx in a sidebar link and it automatically append DN to…

  • Workflow to add new user to a group based on department - what am I missing?

    Hi,

     

     I'm relatively new to ARS (We're running 7.0 in our env). I've been tasked to create / test some workflows based on new user creation. One that I'm attempting to create now is departmental.

     

     

    I've created a "change workflow" with…

  • Temporal Membership Approval - ARS 7

    In our old instance of ARS, we had a workflow that executed when someone requested temporary membership of a group. This would add them no matter what if the hours they wanted didn't exceed the maximum amount of hours and if it was more, it would prompt…

  • Active Roles with Office365 Add-On and Synchronization Service

    Is any one here using the ARS Sync Service with Office365?  What is the user count being synchronized?  Were you using FIM/MIM prior with ADConnect/DirSync?  How would you compare ARS Sync Service with ADConnect and FIM in terms of features and performance…

  • ARS 7 Custom SQL Port

    I'm trying to install ARS and connect to our SQL instance. The port for the server isn't the default 1433. I found some documentation to put SERVERNAME, portnumber but it fails instantly when I do it this way.