• Products
    • View all products
    • Free trials
  • Solutions
    • All Solutions
    • All Integrations
  • Resources
    • All Resources
    • Learning Hub
  • Trials
  • Support
    • Support Home
    • By Product
      • All Products
      • Active Roles
      • Authentication Services
      • Cloud Access Manager
      • Defender
      • Identity Manager
      • Password Manager
      • Safeguard
      • Starling Identity Analytics & Risk Intelligence
      • Starling Two-Factor Authentication
      • TPAM Appliance
    • Contact Support
      • Overview
      • Customer Service
      • Licensing Assistance
      • Renewal Assistance
      • Technical Support
    • Download Software
    • Knowledge Base
    • My Account
      • My Products
      • My Service Requests
      • My Licenses
      • My Groups
      • My Profile
    • Policies & Procedures
    • Professional Services
    • Technical Documentation
    • One Identity University
    • User Forums
    • Video Tutorials
  • Partners
    • Overview
    • Partner Circle Log In
    • Become a Partner
    • Find a Partner
    • Partner Community
  • Communities
    • Home
    • Blogs
      • Blogs A to Z
      • One Identity Community
      • AD Account Lifecycle Management
      • Cloud
      • Identity Governance & Administration
      • Privileged Access Management
      • syslog-ng Community
    • Forums
      • All Product Forums
      • Active Roles
      • Identity Manager
      • Password Manager
      • Safeguard
      • Unix Access Management
    • Social Networks
      • Facebook
      • LinkedIn
      • Twitter
      • YouTube
One Identity Community
One Identity Community
  • Site
  • User
  • Site
  • Search
  • User
Active Roles Community
Active Roles Community
  • Forum
  • Ideas
  • Wiki
  • More
  • Cancel
  • New
  • All tags
  • Script Center: VBScript
  • FAQs
  • Script Center
  • Script Center: PowerShell
  • Tips and How-to's
  • Delete Expired Users and Home Directory

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    Steps through all the users in the AD scope and checks to see if the account has expired. If so - has it been expired for more than 30 days and, if so, get the path and share to the home directory and remove the account's access. Then, delete…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Review for user personal data

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    • Create two virtual attributes and apply them to the user class:

    edsvaIamAgreed - boolean, non-stored, single-valued

    edsvaAgreedDate - generalized time, stored, single-valued

    • Customize Web UI form with user personal data, and add to this…
    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Group management

    Terrance.Crombie
    Terrance.Crombie

    These VBScript samples are relevant to Active Directory group management

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Prohibite a permission propagation to AD

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    This script policy sample demonstrates a permission propagation (aka Sync permission to Active Roles) prohibition.

    This policy should be applied to the ATLinks container (CN=AT Links,CN=Configuration)


    Note This code may use functions from…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • VBScript Library source code

    Terrance.Crombie
    Terrance.Crombie

    '*********************************************************************************

    ' THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND,

    ' EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Script policy sample

    Terrance.Crombie
    Terrance.Crombie

    An example of a well-formed Active Roles script policy that uses the suggested library.

    SCRIPT

    '*********************************************************************************

    ' THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • User logon name generation without national characters

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    A common Active Roles query is how to replace national characters (for ex: æ,ø,å) with general Latin characters (for ex: ae, o, a) in generated user logon name (sAMAccountName) based on a user first & last names that can contain these national…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Create/Delete local user accounts, basing upon creation/deletion of user accounts in Active Directory

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    No description


    Note This code may use functions from the Active Roles Script Policy Best Practices. Please, follow the link to obtain instructions and code for those functions.


    SCRIPT

    '**************************************************…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Prevent copying an attribute on user copy

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    When you copy a user account, certain attributes are copied. The default list of attributes to copy is defined in the Active Directory schema. Attributes that should be copied when the object is copied have a 16th bit set in the seachFlags…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Copy additional attributes on user copy

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    This script sample demonstrates how to copy additional attributes on user copy.

    In script sample, change arrAttributeList to list of your additional attributes


    Note This code may use functions from the Active Roles Script Policy Best Pra…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • How to enable cross-domain moving of user accounts

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    Active Roles has the ability to move a user account between domains, but by default, this ability is hidden on the user interface. Possible, an error will be raised during cross-domain moving if a moving user is a member of a global group…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Re-locates users according to a value set in a virtual attribute

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    Re-locates users in the TestOU Users container according to the value set in the edsvaLOS-U attribute.


    Note This code may use functions from the Active Roles Script Policy Best Practices. Please, follow the link to obtain instructions and…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Move a user to some OU upon creation

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    The corporate policy may demand all newly created user should be located in special OU This script demonstrates how to meet this requirement.

    Note:  Check "Wait while post-event handlers complete operation" checkbox on policy entry UI.…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Validate moving operations

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    Validate moving operations. Apply this script policy to the Active Directory node.


    Note This code may use functions from the Active Roles Script Policy Best Practices. Please, follow the link to obtain instructions and code for those functions…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • User Provisioning - Home Drive Location and Profile based on UserID

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    Here's what I put together for creating and renaming our users. It does the following:

    1. Creates home drives in two different locations based on the first letter of the SamAccountName (A-L and M-Z). It creates the folders and handles the…
    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Populate user attributes based on another attribute - e.g. 'Company'

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    This script demonstrates how to populate specific user attributes based on a change in a different user attribute.


    Note This code may use functions from the Active Roles Script Policy Best Practices. Please, follow the link to obtain instructions…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Stamping manager DN by given manager Id

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    This script policy sample stamps the "manager" attribute (DN syntax) by given "manager' employee id" value during user creation and modification.

    The sample assumes that the user class schema is extended by edsvaM…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Custom script-based User Logon Name Generation policy

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    No description


    Note This code may use functions from the Active Roles Script Policy Best Practices. Please, follow the link to obtain instructions and code for those functions.


    SCRIPT

     

    '**************************************************…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Custom script-based PVG-policy with possible values list

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    This is an example of a script-based PVG-policy with a possible values list. It may be used instead of a regular PVG-policy to provide more functionality.


    Note This code may use functions from the Active Roles Script Policy Best Practice…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Simplified version of the script-based PVG-policy with a possible values list

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    This is a simplified version of the script-based PVG-policy with a possible values list.


    Note This code may use functions from the Active Roles Script Policy Best Practices. Please, follow the link to obtain instructions and code for those…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Populate a PVG policy with a possible values list from external source

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    This script sample demonstrates how to programmatically populate an existing PVG policy with a possible values list from an external text file.

    N.B. It is not an Active Roles script policy, but an external script that works with Active Roles…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Script-based "Last N characters of X attribute"-rule as part of User Logon Name Generation policy rules

    Terrance.Crombie
    Terrance.Crombie

    Description

    There is no out-of-the-box "Last N characters of X attribute"-rule in the User Logon Name Generation policy rules. But it is possible to add a script-based "Last N characters of X attribute"-rule.

    For example, you need…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Programmatically deprovision a user

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    This sample demonstrates how to programmatically deprovision an Active Directory user.


    Note This code may use functions from the Active Roles Script Policy Best Practices. Please, follow the link to obtain instructions and code for those functions…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Notify manager when user object is deprovisioned

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    This "OnDeprovision" script notifies the manager of the target user object that is being deprovisioned.


    Note This code may use functions from the Active Roles Script Policy Best Practices. Please, follow the link to obtain instructions…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • Get user account properties after it had been deleted

    Terrance.Crombie
    Terrance.Crombie

    DESCRIPTION

    This script demonstrates how to get user account properties (for example, sAMAccountName) in onPostDelete() handler.


    Note This code may use functions from the Active Roles Script Policy Best Practices. Please, follow the link to obtain instructions…

    • over 3 years ago
    • Active Roles Community
    • Wiki
  • View related content from anywhere
  • More
  • Cancel
>
  • Company
    • About Us
    • Buy
    • Careers
    • Contact Us
    • News
  • Resources
    • Blogs
    • Customer Stories
    • Documents
    • Events
    • Videos
  • Support
    • Professional Services
    • Renew Support
    • Technical Support
    • One Identity University
    • Support Service
  • Social Networks
    • Facebook
    • Instagram
    • LinkedIn
    • Twitter
    • YouTube
  • © 2025 One Identity LLC. ALL RIGHTS RESERVED.
  • Legal
  • Terms of Use
  • Privacy
  • Community Feedback & Support
  • Cookie Preference Center