• Computer Dynamic Group Membership Rule Distinguished Name

    Hello,

    I want to create a dynamic group including all computers with a Distinguished Name containing "CRETEIL".
    Unfortunately, the membership rule "Computer distinguishedName Contains CRETEIL" doesn't return any items while many computers have…

  • Cross domain members don't inherit group delegated rights

    Hello,

    I have two ARS managed domains which are in the same forest. Let's pretend domain1 and domain2.

    I also have two groups, domain1\read-domain1 and domain2\read-domain2 which have the rights "All Objects - Read All Properties" respectiv…

  • Set Active Roles (ARS) Scheduled (PowerShell) Script Modules to Execute in PWSH.exe (v6+) vs POWERSHELL.exe

    How can I explicitly instruct ARS to execute scripts in PowerShell v7

  • UnDeprovision In ActiveRoles Sync Engine

    Hello, 

    So I can see in the Sync Engine workflows (Old QC)  we have the ability to deprovision a user. we can deprovision if the user doesn't exist in the CSV file.. or trigger a Deprovision based on Field if we are pulling from SQL.

    However, I don…

  • Active Roles 7.2.1 and Collector public hotfix (KB 250838)

    Active Roles 7.2.1 public hotfix is now available on the Support portal (KB 250838).

    https://support.oneidentity.com/kb/250838

    This hotfix package addresses several issues with Active Roles 7.2.1 and the Collector and Report pack.

  • How can I stop ARS from detecting my on-premise exchange environment? I do NOT want any mail options available at all.

    Currently using ARS 7.2.1 in a hybrid environment with on-premise Exchange and O365.  ARS is currently detecting the on-prem exchange environment and causing a few minor issues.  Is there a way to stop ARS from detecting the on-prem exchange environment…

  • ActiveRoles Managed DLs in O365

    Is there a way or ARS Powershell script to bulk change on-prem MS Exchange DLs to ActiveRole managed DLs in O365.
  • Is there a way to successfully update the MemberOf field using Synchronization Service?

    We would like to use Synch Service to update user's group membership from a SQL DB, instead of manually adding groups. We get the below message and found a KB article that says to create a virtual attribute for each group, but this workflow will apply…

  • How to remove breadcrumbs

    I am recreating all my site and want to know how to remove breadcrumbs and the tree view Tab in the new web interface in version 7.2

  • Script a different person in a notification other than manager

    I am creating a user and trying to use the notification task in a workflow but i need a way to add a different person other than a manager to send to.  I have a virtual attrib that has a sam account name that would like to send the notification to.  the…

  • New Active Roles Policy

    Hi,

    We want to add 2 new policy's on user creation these are

    Property Generation and Validation

    . accountExpires (accountExpires)

    .edsaMemberOf (edsaMemberOf)

     

    But we want them to be optional not Must be specifed, how can this be done?

     

    regards,

    B…

  • Use ARS and/or powershell to create groups - nested & add members automatically?

    We use the lousy nested structure for shared folder ntfs permissions where a domain local group contains a universal which contains a global and the global has the users.  I want to find a way to create the 3 groups required when a new folder is setup…

  • Searching and exporting account information from Active Directory

    I would like to do the following with AD accounts:

    Export the following fields from Active Directory to an Excel sheet with the appropriate headers:

    Under AD Account's General Tab: First Name, Last name, Display Name, Description, Office, Telephone Number…