• Products
    • View all products
    • Free trials
  • Solutions
    • All Solutions
    • All Integrations
  • Resources
    • All Resources
    • Learning Hub
  • Trials
  • Support
    • Support Home
    • By Product
      • All Products
      • Active Roles
      • Authentication Services
      • Cloud Access Manager
      • Defender
      • Identity Manager
      • Password Manager
      • Safeguard
      • Starling Identity Analytics & Risk Intelligence
      • Starling Two-Factor Authentication
      • TPAM Appliance
    • Contact Support
      • Overview
      • Customer Service
      • Licensing Assistance
      • Renewal Assistance
      • Technical Support
    • Download Software
    • Knowledge Base
    • My Account
      • My Products
      • My Service Requests
      • My Licenses
      • My Groups
      • My Profile
    • Policies & Procedures
    • Professional Services
    • Technical Documentation
    • One Identity University
    • User Forums
    • Video Tutorials
  • Partners
    • Overview
    • Partner Circle Log In
    • Become a Partner
    • Find a Partner
    • Partner Community
  • Communities
    • Home
    • Blogs
      • Blogs A to Z
      • One Identity Community
      • AD Account Lifecycle Management
      • Cloud
      • Identity Governance & Administration
      • Privileged Access Management
      • syslog-ng Community
    • Forums
      • All Product Forums
      • Active Roles
      • Identity Manager
      • Password Manager
      • Safeguard
      • Unix Access Management
    • Social Networks
      • Facebook
      • LinkedIn
      • Twitter
      • YouTube
One Identity Community
One Identity Community
  • Site
  • User
  • Site
  • Search
  • User
Active Roles Community
Active Roles Community
Wiki Checking the uniqueness of a property
  • Forum
  • Ideas
  • Wiki
  • More
  • Cancel
  • New
  • -Active Roles Script Center
    • +Active Roles Script Policy Best Practices
    • Active Roles SDK
    • +C#
    • +JavaScript
    • -PowerShell
      • PowerShell Library Source Code
      • -PowerShell samples
        • Alert on pending approval request expiration
        • Building a Managed Unit Dynamically
        • Calculate user mailbox size
        • Checking the uniqueness of a property
        • Create Dynamic Group in PowerShell
        • Export Domain Users to a .csv file
        • Functions for creation of Policy links
        • Get Active Roles Management Shell Module version (with build number)
        • Home Folder Move with User Moves
        • How to schedule the Active Roles Management shell
        • Populating a custom Virtual Attribute with a readable accountExpires timestamp using an Active Roles Policy Script
        • PowerShell: Update Property Generation and Validation policy with a new possible value list
        • Random Password Generation
        • Renaming a user post-creation
        • Working with the mS-DS-ConsistencyGuid attribute
    • +VBScript

Checking the uniqueness of a property

Description

This script checks an attribute value, it ensures the value will be unique.

Script

#*********************************************************************************

# THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND,

# EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED

# WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A PARTICULAR PURPOSE.

#

# IF YOU WANT THIS FUNCTIONALITY TO BE CONDITIONALLY SUPPORTED,

# PLEASE CONTACT ONE IDENTITY PROFESSIONAL SERVICES.

#*********************************************************************************

 

function onCheckPropertyValues($Request)

{

$objectClass = [string]$PolicyEntry.Parameter("Object class LDAP name")

if ($Request.Class -ne $objectClass) { return }

 

$attrName = [string]$PolicyEntry.Parameter("Attribute LDAP name")

$scope = [string]$PolicyEntry.Parameter("Uniqueness Scope")

 

$attrValue = $Request.Get($attrName)

if ($attrValue -eq $null) { return }

 

$founds = Get-QADObject -SearchRoot $scope -SearchAttributes @{$attrName=$attrValue;"objectClass"=$objectClass}

if ($founds -eq $null) { return}

if ($founds.DN -eq $Request.Name) { return } # found only self

 

$names=""

$founds | %{ $names+= "`n" + $_.CanonicalName }

$Request.SetPolicyComplianceInfo($attrName,

$constants.EDS_POLICY_COMPLIANCE_ERROR,

"The value '$attrValue' was found in objects:$names",$false)

}

 

function onInit($context)

{

$par1 = $Context.AddParameter("Attribute LDAP name")

$par1.MultiValued = $False

$par1.Description = "Attribute LDAP name to check value is unique."

$par1.Defaultvalue = ""

 

$par2 = $Context.AddParameter("Object class LDAP name")

$par2.MultiValued = $False

$par2.Description = "Object class which attribute values should be check for uniqueness."

$par2.Defaultvalue = "user"

 

$par3 = $Context.AddParameter("Uniqueness Scope")

$par3.MultiValued = $False

$par3.Description = "Domain, Organizational Unit or other scope in Active Directory where" +

" the value for the attribute should be unique."

$par3.Defaultvalue = "CN=Active Directory"

$par3.Syntax = "DN"

 

}

#***** END OF CODE ***************************************************************

  • Script Center: PowerShell useful
  • Script Center
  • Share
  • History
  • More
  • Cancel
Related
Recommended
  • Company
    • About Us
    • Buy
    • Careers
    • Contact Us
    • News
  • Resources
    • Blogs
    • Customer Stories
    • Documents
    • Events
    • Videos
  • Support
    • Professional Services
    • Renew Support
    • Technical Support
    • One Identity University
    • Support Service
  • Social Networks
    • Facebook
    • Instagram
    • LinkedIn
    • Twitter
    • YouTube
  • © 2025 One Identity LLC. ALL RIGHTS RESERVED.
  • Legal
  • Terms of Use
  • Privacy
  • Community Feedback & Support
  • Cookie Preference Center