• Synchronization with active directory

    Synchronization with active directory.
    Recently, the connection between idm and active directory disappeared.
    Idm does not see any changes that have occurred in active directory.
    For example, an IT specialist creates a new group, a mail database, but these…

  • AD group

    How do I add a user to an AD group?

  • Add user to AD group and run script

    We have 19 groups, say if user is added to 3 groups out of those 19. the WF should add that single user to another security group and execute the script or assign 0365 License.

    can someone guide me a good approach to achieve this?

  • Extract Secondary owners from Security Groups

    Hi All,

    I need powershell script to find out secondary owners from all the security groups in my domain. I searched for few blogs and found some suggestion about report but i need script/Powershell to find out the same. 

    We have thousand groups and for…

  • Read Target group's managers and send mail to email attribute value defined in other domain

    Hi ,

    We have Domain A and Domain B in ARS. Domain A and Domain B users are in sync. Domain A does not have email attribute or incorrect email attribute but corresponding user in domain B has correct email attribute. we have security groups in domain A…

  • Active Roles 7.4.4 Capabilities

    Hi,

    We are looking to automate our current joiners, movers and leavers process and believe that this can be achieved using the latest version of AR. 

    We would like to setup AR integration with ServiceNow and then create the following workflows in its…

  • Alternative of Email attribute

    Hi All,

    when we add approvers for group membership additions in Active role. it will trigger email to Primary/Secondary owners to that group for approval. Probably when we add Primary/Secondary owners to groups it automatically read their email attribute…

  • Report of all users for Proxyaddress attribute

    Hi,

    I need Proxyaddress attribute of all users in domain. Since there are multiple values available in this attribute i need either to get each attribute separately in column or search users with one particular value only. for an example i need all users…

  • Azure AD Questions

    Hi all,

    I am new to One Identity products and possibly looking at purchasing Active Roles to automate new user requests from Service Now but I have a few questions that i hope you can help me with:

    Environment

    We currently create users on our on premise…

  • New-QADUser cmdlet Issue when logging the account creation event

    So when using the new-qaduser cmdlet, see below, The Event Log for event 4720 on the DC its connecting to to create the user account shows:

    Security ID: Domain\testing3
    Account Name: $2RG100-UU7PKQ1Q51GA
    Account Domain: Domain

    Attributes:
    SAM Account…

  • ActiveRoles Management Shell for Active Directory version 1.6

    Hi team,

    I know that ActiveRoles Management Shell for Active Directory version 1.5 was last free version post that they have mentioned it should be commercial software but however no details on version 1.6 if it is free or commercial, because 1.7 mentioned…

  • Exchange Properties of users are not getting open for some users

    Hello,

    We are recently facing the issue on few users for whom we are not able to open exchange properties. Other tabs are working fine, but when we select exchange properties in ARS portal after opening user general properties, it takes time and finally…

  • ARS background process

    Hi All,

    I just wanted to know what background process does ARS do to provision objects to AD. Is it LDAP or any scripts that it run in background.

    Thanks,

    zzeet.

  • Workflow - How to set an attribute to the secondary owner's e-mail address of workflow target?

    Hi everyone,

    Does anyone know how I can set an attribute of my choice, to the e-mail address of the secondary owner of the workflow target? 

    So far, I have the following: 

    >>Operation execution: Create User; where secondary owner of workflow target is not…

  • Using Managed Units outside of Active Roles

    Has anyone come up with a way to use Managed Units outside of Active Roles?  I have a customer that would like to setup some Managed Units so that when they are setting permissions on SharePoint sites, the admin does not search the entire AD, but just…

  • ARS PowerShell script to "Move" users from one group to another.

    I have a .csv with 2 columns. Column 1 is called SourceGroup with a list of groups, and the other is DestinationGroup with a different list. I have a script I am trying to use that will Add the users from SourceGroup to the DestinationGroup, after the…

  • How can I deny admins the right to reset their own password?

    I have a bunch of users who have (quite properly) the ability to reset passwords.  Unfortunately, a number of them are abusing this ability by resetting (rather than changing) their own passwords so that they keep the same password in spite of the password…

  • Change/replace SIP address from the edsvaOffice365-UserID field

    Ill start off by saying I am a complete novice

    I would like to change user SIP address with the field edsvaOffice365-UserID

    Id also like to be able to update this by OU if possible

    I am using Quest Commandlet to pull this information. Get-QADUser -SearchRoot…

  • How do I allow all users to manage all distribution groups in a specific OU through Self Service

    At the moment I'm really struggling to figure out how to add functionality into self service. 

     

    We have a specific OU called "Distribution lists - SITE" and what I would like is to allow X amount of users to edit/change/remove membership into those…

  • Script for Quest Powershell in order to pull data from AD

    Hi All, im new to powershell and need to extract out some data.

    I would like to extract below attributes from AD for a User. Could you please help me in fixing the script.


    Get-QADUser t70869 | select -ObjectAttributes samAccountName, givenName, sn, displayName…

  • Use ARS and/or powershell to create groups - nested & add members automatically?

    We use the lousy nested structure for shared folder ntfs permissions where a domain local group contains a universal which contains a global and the global has the users.  I want to find a way to create the 3 groups required when a new folder is setup…

  • Searching and exporting account information from Active Directory

    I would like to do the following with AD accounts:

    Export the following fields from Active Directory to an Excel sheet with the appropriate headers:

    Under AD Account's General Tab: First Name, Last name, Display Name, Description, Office, Telephone Number…