• Set account expiration date for a user account using powershell

    Hi, 

    I'm using the following command to set account expiration date but it is not working. 

    Set-QADUser -Identity username -AccountExpires date

    The AccountExpires value changes, but not AccountExpirationStatus value doesn't changes. Also, on the…

  • Set account expiration date for a user account using powershell

    Hi, 

    I'm using the following command to set account expiration date but it is not working. 

    Set-QADUser -Identity username -AccountExpires date

    The AccountExpires value changes, but not AccountExpirationStatus value doesn't changes. Also, on the…

  • Windows 11 and QAD PowerShell

    Getting an issue with QAD Powershell Cmdlets in Windows 11, running ARS 8.1.5:

    The below works fine when ran from the ARS (Windows 2022) Server - all Deprov tasks complete as per the deprovisioning policy based on the Managed Unit:

    Connect-QADService -Service…

  • Copy additional attributes on user copy with Powershell script OnPostCreate?

    Hi,

    I have been trying to get additional attributes (description f.e.) when copy a user from Web Interface, but with $Request method on a Powershell script it's has been impossible to get the source object.

    I finally used the VB scipt that is at the…

  • export result of managed unit (user objects)

    I created a Managed Unit with multiple Include queries.  The result shows me the display name, distinguished name and SAM account name of user objects.

    Is it possible to export (powershell) this list to a CSV file?

  • Passing user object to script in workflow

    Hi

    I'm trying to get a workflow to run which will update extensionAttribute7 of a user object when it's been added to a group, based on the users job title.
    e.g. Joe Bloggs gets added to the group, his title is IT, EA7 needs to be set to "03452…

  • Passing user object to script in workflow

    Hi

    I'm trying to get a workflow to run which will update extensionAttribute7 of a user object when it's been added to a group, based on the users job title.
    e.g. Joe Bloggs gets added to the group, his title is IT, EA7 needs to be set to "03452…

  • Updating user attribute when added to group

    Hi

    I'm trying to get a workflow to run which will update extensionAttribute7 of a user object when it's been added to a group based on the users job title.
    e.g. Joe Bloggs gets added to the group, his title is IT, EA7 needs to be set to "03452…

  • get-qaduser stop on error

    When using 'get-qaduser samaccountname' if the samaccount name is not valid,  no error is thrown it just does not return anything

    Is there a way to make it return an error if the samaccountname is not valid?

  • Unable to modify attribute in onPostCreate

    Hello,

    I am trying to modify the attribute ""edsvaSendAsTrustees" in $DirObj in the function onPostCreate. My PowerShell function that is called in the onPostCreate looks like this:

    #===================================================…
  • Can't Access Saved Object Properties from Script / Counter Returns Empty

    Hi,

    We're trying to create a workflow that counts every time a user enables or disables another user every day (workflow trigger is the modifivation of edsaAccountIsDisabled). (the counter resets every day.) If the counter reaches 20, the action requires…

  • retrieve PowerShell command in web interface

    I have script in workflow to check LAPS password from ms-Mcs-AdmPwd and send it to initiator mail,
    The workflow in WI task. it's possible to retrieve the password to Web Interface and not to mail?

  • PowerShell - Access Template - checkboxs for apply permissions onto

    The command being leveraged is:

    New-QARSAccessTemplateLink -AccessTemplate $AccessTemplate -DirectoryObject $DirObj -Trustee $TrustedGroup -Proxy
    What additional parameters are required to remove "Child objects of this directory object" selection (uncheck…
  • How to connect to ARS v8 from PowerShell?

    I have the following function in PowerShell:

    Function Get-ARSServers {

    $searchRoot = "CN=Enterprise Directory Manager,CN=Aelita,CN=System,$([System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain().GetDirectoryEntry() | Select-Object -ExpandProperty…

  • Synchronization service powershell write to datetime attribute error

    Hello,

    I have been trying to script getting a datetime from MS Graph and output this to a virtual attribute (configured as general time) in Active Roles, but every time I receive the same error, no matter what I do:

    "The string was not recognized as…

  • Get Users of Dynamic Groups

    I have a dynamic group called F_AllManagers. It is made up of multiple dynamic groups. I need to get a list of the actual users from the multiple dynamic groups that make up the F_AllManagers. How can this be done in Quest Powershell?

  • Update Virtual attribute value based on another Virtual attribute value change.

    Hello,

    I'm having a requirement, we created couple of Virtual attributes in Active Roles and if we change a value of VA1 and then dynamically update the value of VA2. 

    VA1 - Dropdown field

    VA2 - String field

    Do let me know if you need more information…

  • anyone use CURL.exe from Windows env to access ARS SPML ? seeing issue with auth

    I used a script to confirm availability of the SPML provider and operational status by returning attributes of an object from all 4 configured ARS  SPML hosts.

    Powershell query to return data works ... however the customer team uses VMWare Orchestration…

  • Pull a value out of policy or enforce a policy on one user.

    My goal is to look at the policy applied to an object and pull a value the policy would set.

    Specifically, I'd like to pull homePath and homeDirectory out of the Home Folder and AutoProvisioning Policy applied to a user object.


    This looks close to…

  • Temporary group membership

    HI,  I would like to add a group by midnight through a script, I know the GUI has the setting to set date and time but how would I do it using a script.

    Command:

    Add-QADgroupmember -identity "groupname" -member $ADuser   (tonight at midnight)

  • Enable-RemoteMailbox cmdlet not handling non terminating errors

    Hello,

    I'm using Enable-RemoteMailbox cmdlet and I wanted to handle non-terminating exceptions generated by the cmdlet. I searched '-ErrorAction Stop' parameter and used with Enable-RemoteMailbox cmdlet but no luck.

    Someone please help me out…

  • New-QADUser cmdlet Issue when logging the account creation event

    So when using the new-qaduser cmdlet, see below, The Event Log for event 4720 on the DC its connecting to to create the user account shows:

    Security ID: Domain\testing3
    Account Name: $2RG100-UU7PKQ1Q51GA
    Account Domain: Domain

    Attributes:
    SAM Account…

  • How to trigger map operation and commit without using the GUI console?

    Is there a way to trigger a map operation and commit for a password sync pair without using the GUI console?  The admin guide explains how to do it with console, but I'd prefer to send a command to the QARS server to trigger that, instead (preferably from…

  • PowerShell Library Source Code

    # *****************************************************************************
    # Best Practices Library For PowerShell
    # *****************************************************************************\
    #
    # Copyright One Identity
    #
    #
    #========================…

  • Unable to set edsvaSecondaryOwnersCanUpdateMembershipList attribute on a group object using PowerShell

    Hello all,

    I have run into another snag when trying to modify objects in ARS with PowerShell. Currently, I am working on scripting DL creation but am hung up on changing one attribute. My current code is as follows:

    Connect-QADService -Proxy

    Set-QADObject…