• PowerShell - Access Template - checkboxs for apply permissions onto

    The command being leveraged is:

    New-QARSAccessTemplateLink -AccessTemplate $AccessTemplate -DirectoryObject $DirObj -Trustee $TrustedGroup -Proxy
    What additional parameters are required to remove "Child objects of this directory object" selection (uncheck…
  • How to connect to ARS v8 from PowerShell?

    I have the following function in PowerShell:

    Function Get-ARSServers {

    $searchRoot = "CN=Enterprise Directory Manager,CN=Aelita,CN=System,$([System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain().GetDirectoryEntry() | Select-Object -ExpandProperty…

  • What is the command to remove a user from AD group using Remove-QADGroupMember from the same domain and aswell as different domain?

    What is the command to remove a user from AD group using Remove-QADGroupMember from the same domain and aswell as different domain?

  • Backsync assignedPlans

    Hi,

    As per this KB, the attribute assignedPlans can't be found when trying to create a sync rule.

    I'm trying to write a PowerShell script to extract assignedPlans for my customer to sync:

    $aplans = $srcObj["assignedplans"] -all
    $aplans…

  • Synchronization service powershell write to datetime attribute error

    Hello,

    I have been trying to script getting a datetime from MS Graph and output this to a virtual attribute (configured as general time) in Active Roles, but every time I receive the same error, no matter what I do:

    "The string was not recognized as…

  • Get Users of Dynamic Groups

    I have a dynamic group called F_AllManagers. It is made up of multiple dynamic groups. I need to get a list of the actual users from the multiple dynamic groups that make up the F_AllManagers. How can this be done in Quest Powershell?

  • Upgrade question for ARS 7.6.1 and MS Teams Module. Which version to install?

    Getting ready to do an upgrade. I have a question about the MS Teams Powershell module supported by ARS 7.6.1.

    Active Roles Product Notification (oneidentity.com)

    Based on the above product notification, we need to install MS Teams Powershell module 4…

  • Reset Passwords for users in a specific OU

    Hi There

    we have a new HR system that is using Powershell to Create users. Unfortunately, this does not output the passwords so we cannot send them to the managers.

    Is there a way to reset the passwords for any users that get created in this OU using…

  • Virtual Attribute update from ARS Sync or Set-QADUSer

    Hello,

    I have a new virtual attribute that I need populated for 34k users. Can you tell me the quickest way to accomplish this?

    I've tried via Active Roles Sync from a SQL Table and also took the data from the table and used "Set-QADUser -Proxy -Connect…

  • How to change one common attribute for multiples groups using csv.

    How to change one common attribute for multiples groups using csv.

    i have around 2000+ groups which need to have a attribute updated. How can we achieve this.

  • Update Virtual attribute value based on another Virtual attribute value change.

    Hello,

    I'm having a requirement, we created couple of Virtual attributes in Active Roles and if we change a value of VA1 and then dynamically update the value of VA2. 

    VA1 - Dropdown field

    VA2 - String field

    Do let me know if you need more information…

  • anyone use CURL.exe from Windows env to access ARS SPML ? seeing issue with auth

    I used a script to confirm availability of the SPML provider and operational status by returning attributes of an object from all 4 configured ARS  SPML hosts.

    Powershell query to return data works ... however the customer team uses VMWare Orchestration…

  • Time of ARS doesn't match the time of the server

    Hello. I am not sure what is wrong here Slight smile

    I am trying to manage temporary membership for groups using a powershell script. However, the times used differ between the current time (time of the server where ARS is installed) and the time that the Change…

  • Assign add/remove group members permissions to AD group via script

    Hi Guys, how do I assign add/remove group members permissions to AD group via script? I know we can do it via set-acl command in Powershell, however how can we do it via script in QAD?

    I need to assign permissions to over 100 groups, and thus much easier…

  • $Request Output

    I would like to create some Windows Events for our Powershell Scripts.

    One event we would like to create is when creating an AD object. Idea would be to create an event in onpostcreate. For this I would like to output the $Request in general if all infos…

  • Set the edsvaDeprovisionDeletionDate attribute value in powershell

    I've a requirement to set the edsvaDeprovisionDeletionDate attribute value with future datetime using powershell code and its GeneralizedTime datatype. So I'm unable to set the value to the attribute using powershell. Could anyone please help me to…

  • Pull a value out of policy or enforce a policy on one user.

    My goal is to look at the policy applied to an object and pull a value the policy would set.

    Specifically, I'd like to pull homePath and homeDirectory out of the Home Folder and AutoProvisioning Policy applied to a user object.


    This looks close to…

  • How to access container in Active Directory using PowerShell

    Hello,

    I would like to restore the deleted objects from the Deleted Objects container. I'm looking for a PowerShell script cmdlet or script.

    Appreciate for the help in advance.

    Thanks 

  • Temporary group membership

    HI,  I would like to add a group by midnight through a script, I know the GUI has the setting to set date and time but how would I do it using a script.

    Command:

    Add-QADgroupmember -identity "groupname" -member $ADuser   (tonight at midnight)

  • Quest Powershell to Remove Leading Zero

    How can I remove the first leading zero using powershell?

    I have the following numbers and need them to have the first zero removed.

    00010 >> 0010
    05812>>5812

    Any suggestions?

  • Is it possible to apply a VA value to multiple users in one pass?

    I have a few thousand users to apply a VA value to - in order for a DynamicGroup to pull them in as members.

    Other than my normal practice, of looping through the list - is there an array way to feed set-qaduser an attributeValue append that would take…

  • Enable-RemoteMailbox cmdlet not handling non terminating errors

    Hello,

    I'm using Enable-RemoteMailbox cmdlet and I wanted to handle non-terminating exceptions generated by the cmdlet. I searched '-ErrorAction Stop' parameter and used with Enable-RemoteMailbox cmdlet but no luck.

    Someone please help me out…

  • Home Folder Move with User Moves

    Here is a Powershell script that can be used to have a user's Homedirectory change and move from one school location to another.

    NOTES

    Add this code as a Powershell Script Module. Then add it to your Policy as a "Script Execution Policy".…

  • Get current logged in user

    Hello,

    How to get current logged in user through custom script in ARS?

    Thanks

  • Uncheck and Disable 'Creation of Mailbox' option in Contact creation wizard

    Hello,

    I'm have tried below script in policy to uncheck and disable 'Create a mailbox' option in the contact creation wizard but its not reflecting on the screen.

    function onGetEffectivePolicy($Request)
    {
    if($Request.Class -ne "contact"){return…