• How to push a boolean FALSE in forward sync rule

    Hello 

    I want to push a boolean FALSE in a Forward Sync Rule in Active Roles Synchronisation Service?

    I tried sync new User from a SQL Database to Active Roles. At the sync process I have to fill edsaPasswordNeverExpire with false, because there is a policy…

  • Adding contacts to a distribution list

    Using ARS 7 through the web interface, users are unable to search for contacts when adding objects to a distribution list. Users can find the contact in the global search, click the contact's "member of" and add the group that way but when adding a contact…

  • Access template permissions after group add/removal

    We're working on implementing ARS 7.0 (clean install) after having 6.9 for quite awhile. We've kind of hit a snag with our elevated permissions.

     

    We have workstation support that uses temporal membership to "elevate" themselves into a group that…

  • Possible to put a cap on the total number of members a group can have?

    Hi,

    Just wondering if/how I could use ActiveRoles to put a limit on the number of members a group can have? Ideally I would like certain AD groups to have a maximum number of members, and then preventing new members from being added until the member count…

  • Script a different person in a notification other than manager

    I am creating a user and trying to use the notification task in a workflow but i need a way to add a different person other than a manager to send to.  I have a virtual attrib that has a sam account name that would like to send the notification to.  the…

  • Updating EDS_CONTROL_OBJECT_DN Not Working - ARS 7

    I've created a workstation deprovisioning policy, this policy changes properties, disabled and moves a workstation to a deprovisioned OU. This isn't a form policy, it's an attribute setter command. It flips a boolean to true which kicks off the policy…

  • Workflow Approval

    When a manager receives an approval to add a user to a group is there a way we can provide a link to check the existing membership ?

     

    We want the email to say “remember it is your responsibility to ensure the correct list of people have access to this…

  • New Active Roles Policy

    Hi,

    We want to add 2 new policy's on user creation these are

    Property Generation and Validation

    . accountExpires (accountExpires)

    .edsaMemberOf (edsaMemberOf)

     

    But we want them to be optional not Must be specifed, how can this be done?

     

    regards,

    B…

  • New Active Roles Policies

    Hi,

    We want to add 2 new policy's on user creation these are

    Property Generation and Validation

    . accountExpires (accountExpires)

    .edsaMemberOf (edsaMemberOf)

     

    But we want them to be optional not Must be specifed, how can this be done?

     

    regards,

    B…

  • Use ARS and/or powershell to create groups - nested & add members automatically?

    We use the lousy nested structure for shared folder ntfs permissions where a domain local group contains a universal which contains a global and the global has the users.  I want to find a way to create the 3 groups required when a new folder is setup…

  • ARS VPAT Section 508 Compliance DOC available?

    I remember seeing a document for ARS several years back - but am not able to locate one on the forums.    Does anyone have a pointer to the information? A Voluntary Product Accessibility Template , or VPAT, is a standardized form developed by the Information…

  • Antivirus exclusions for ARS

    Hi all Our company policy is to have A/V software on all servers and I'm about to put it onto our ARS servers, but was just wondering if anyone knows of an exclusions list that's required to allow ARS to continue to function properly without A/V stopping…

  • Searching and exporting account information from Active Directory

    I would like to do the following with AD accounts:

    Export the following fields from Active Directory to an Excel sheet with the appropriate headers:

    Under AD Account's General Tab: First Name, Last name, Display Name, Description, Office, Telephone Number…

  • Possible to create custom handlers?

    In ARS 7, it appears there has been an implantation of a directory "Handlers". Since the sidebar navigation doesn't allow me to append DN to anything, this allows me to put ~/Handlers/MyAccount.ashx in a sidebar link and it automatically append DN to…

  • Workflow to add new user to a group based on department - what am I missing?

    Hi,

     

     I'm relatively new to ARS (We're running 7.0 in our env). I've been tasked to create / test some workflows based on new user creation. One that I'm attempting to create now is departmental.

     

     

    I've created a "change workflow" with…

  • Temporal Membership Approval - ARS 7

    In our old instance of ARS, we had a workflow that executed when someone requested temporary membership of a group. This would add them no matter what if the hours they wanted didn't exceed the maximum amount of hours and if it was more, it would prompt…

  • Active Roles with Office365 Add-On and Synchronization Service

    Is any one here using the ARS Sync Service with Office365?  What is the user count being synchronized?  Were you using FIM/MIM prior with ADConnect/DirSync?  How would you compare ARS Sync Service with ADConnect and FIM in terms of features and performance…

  • ARS 7 Custom SQL Port

    I'm trying to install ARS and connect to our SQL instance. The port for the server isn't the default 1433. I found some documentation to put SERVERNAME, portnumber but it fails instantly when I do it this way.