• Temporary Membership Settings Being Cleared Unexpectedly

    Encountering an issue with ActiveRoles 7.5 where the temporary expiration date is getting cleared overnight. Specifically, when we add a deprovisioned user as a member to a security group and set a user to be removed on a specific date, the temporary…

  • Can't Access Saved Object Properties from Script / Counter Returns Empty

    Hi,

    We're trying to create a workflow that counts every time a user enables or disables another user every day (workflow trigger is the modifivation of edsaAccountIsDisabled). (the counter resets every day.) If the counter reaches 20, the action requires…

  • anyone use CURL.exe from Windows env to access ARS SPML ? seeing issue with auth

    I used a script to confirm availability of the SPML provider and operational status by returning attributes of an object from all 4 configured ARS  SPML hosts.

    Powershell query to return data works ... however the customer team uses VMWare Orchestration…

  • Rest API for Active Roles

    Are the apis still under development or are they already available for use?

  • Computer Dynamic Group Membership Rule Distinguished Name

    Hello,

    I want to create a dynamic group including all computers with a Distinguished Name containing "CRETEIL".
    Unfortunately, the membership rule "Computer distinguishedName Contains CRETEIL" doesn't return any items while many computers have…

  • Cross domain members don't inherit group delegated rights

    Hello,

    I have two ARS managed domains which are in the same forest. Let's pretend domain1 and domain2.

    I also have two groups, domain1\read-domain1 and domain2\read-domain2 which have the rights "All Objects - Read All Properties" respectiv…

  • Set Active Roles (ARS) Scheduled (PowerShell) Script Modules to Execute in PWSH.exe (v6+) vs POWERSHELL.exe

    How can I explicitly instruct ARS to execute scripts in PowerShell v7

  • Web Interface crashes when enumerating large groups

    We are in the process of upgrading from ARS 6.9 to 7.3.3. We both versions running in parallel and are planning a cutover soon. However, on ARS 7.3.3, the web interface hangs and eventually crashes while attempting to enumerate large groups. For example…

  • New-QADUser cmdlet Issue when logging the account creation event

    So when using the new-qaduser cmdlet, see below, The Event Log for event 4720 on the DC its connecting to to create the user account shows:

    Security ID: Domain\testing3
    Account Name: $2RG100-UU7PKQ1Q51GA
    Account Domain: Domain

    Attributes:
    SAM Account…

  • need help to list users with second owner in a csv file

    Hello.

    My Problem is, i have to list all Users in a specified OU, with entries in the Second Owner field.

    How i can do this and export in a CSV File?

    Would be great if someone could help.

    Thanks and best regard

    Eddi

  • Active Roles Upgrade - Slow SQL Replication

    During Active Roles upgrade to 7.2 version we caught such a problem:

    After deploying new change history databae on new server and configuring it as publisher we added a subscriber. 95% of database on publisher migrated during first hours, but the rest…

  • I want to create computer objects without accessing the ARS console

    I tried with the below code but it gives error.

    powershell.exe -command New-QADComputer -Name <Name of the new computer> -ParentContainer "<OU-Copied the distinguishedName of an earlier computer object from the AD>" -ObjectAttr…
  • Error while undo-deprovisioning users

    I got ARS upgraded to 7.4.3 upgraded to our test environment, during testing i found out i get an error while doing a undo-deprovionsing user from the Disabled Users - deprovionsined users container

    The error says 'Built-in Policy - Dynamic Groups' failed…

  • Set visibility of an entry in a form through PowerShell script

    Hi everyone,

    We have built a custom form in which fields are populated through a PowerShell script, ARS runs this script as you are opening the form.
    It is used to provide a view of bought Office 365 licenses by each of our subsidiaries local IT teams…

  • I find out which Shared Mailboxes a person has access to?

    This is probably as much an Exchange question as an Active Roles one, but is there any way to find out from Active Roles which Shared Mailboxes a user has access to?  We're sometimes asked to make a new user the same as an existing one and they don't always…

  • distribution list members -workflow

    I am trying to create a workflow to send a list of group members to the group owner every so often to validate correct group members.

  • Step Handlers - Synchronization Service

    Does anyone know how to use step handlers? The documentation barely even talks about them and no examples are given.

    I would like to take data from srcobj or dstobj and perform actions pre or post run. Is this not doable. In what forms are step handlers…

  • Quickconnect Deprovision from DB2 Table to Active Roles

    Source System: DB2 Table

    Destination: Active Roles Server

    I have the synchronization service read data from a table. This table is formed by user submission to deprovision accounts. From the sync server, I send a deprovision job over to Active Roles…

  • Unable to create Mailbox for newly created users using New QADUser command

    I would like to create Exchange Mailbox using powershell script using New-QADUser. In Script, i used few virtual attributes like 'edsva-MsExch-MailboxType'=1;'edsva-MsExch-ApplyEmailAddressPolicy'='TRUE';'edsva-MsExch-ArchiveMailboxEnabled'='FALSE' .…

  • Create Exchange User Mailbox - Quest Powershell

    Hi guys,

    I'm just looking to see if it's possible to create an exchange user mailbox using Quest AD Shell module within Powershell? I'm not familiar with QAD module and it's commands.

    In our current environment there is an option to "Create…

  • Running Workflows in parallel? Is this possible?

    Hello All,

    my customer asks, if it is possible to run workflows in parallel? If a new User is created, different attributes should be set by different people (e.g. mobile number, Telephone number ertc.). And it make no sense to set the telephone number…

  • Active Roles installation.

    Hi,

    This surely a silly question but is there a way to install and testing Active Roles in our infrastructure without making any changes to it during the installation?

    I know there is a free virtual trial option but was wondering if I can install it without…

  • Setting Virtual Attribute on the fly when user Properties are opened

    Hey Everyone,

    First post and still quite a newb with Active Roles so don't mind the brief ignorance you may see :)

    Basically my end goal is to make a Tab in the web interface User Object properties window only visible when a virtual attribute is…

  • Upgrade ARS 6.8 and Upgrad Server OS and SQL-Version - All in one step possible?

    Hello All,

    I have to upgrade ARS from Version 6.8 to an up-to-date Version. And I also have to update the Server OS and SQL-Version. For my understanding of the ARS update path document I first have to update to Version 6.9 before I can go to Version…

  • Working with group changes using Powershell

    Hi,

    Are there any example scripts floating around that show how to interact with changes made to groups using the script modules?

    I am fairly familiar with working with User objects and "onPreCreate", "OnPostCreate" etc, but I don't have any examples…