Welcome to the Active Roles Script Center.

These examples are provided as is, without warranty of any kind, either expressed or implied, including but not limited to the warranties or merchantability and/or fitness for a particular purpose.

If you want…

# *****************************************************************************
# Best Practices Library For PowerShell
# *****************************************************************************\
#
# Copyright One Identity
#
#
#========================…

DESCRIPTION

This script calculates user mailbox size for a given user.

SCRIPT

#*********************************************************************************

# THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND,

Here is a Powershell script that can be used to have a user's Homedirectory change and move from one school location to another.

NOTES

Add this code as a Powershell Script Module. Then add it to your Policy as a "Script Execution Policy".…

DESCRIPTION

• Create two virtual attributes and apply them to the user class:

edsvaIamAgreed - boolean, non-stored, single-valued

edsvaAgreedDate - generalized time, stored, single-valued

• Customize Web UI form with user personal data, and add to this…

These VBScript samples are relevant to Active Directory group management

DESCRIPTION

This script policy sample demonstrates a permission propagation (aka Sync permission to Active Roles) prohibition.

This policy should be applied to the ATLinks container (CN=AT Links,CN=Configuration)

Note This code may use functions from…

'*********************************************************************************

' THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND,

' EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED…

An example of a well-formed Active Roles script policy that uses the suggested library.

SCRIPT

'*********************************************************************************

' THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF…

DESCRIPTION

A common Active Roles query is how to replace national characters (for ex: æ,ø,å) with general Latin characters (for ex: ae, o, a) in generated user logon name (sAMAccountName) based on a user first & last names that can contain these national…

DESCRIPTION

The query-based Managed Units in ARS are all full "Subtree" searches of the provided container. In some cases this is undesirable; rather a "Onelevel" search is needed instead.

The code below is intended to capture object…

DESCRIPTION

The purpose of this script is to rename a user immediately post-creation to include the description (or any other arbitrary attribute) as part of the name.

This cannot be enforced in the Active Roles Console client prior to creation since…

DESCRIPTION

No description

Note This code may use functions from the Active Roles Script Policy Best Practices. Please, follow the link to obtain instructions and code for those functions.

SCRIPT

'**************************************************…

DESCRIPTION

When you copy a user account, certain attributes are copied. The default list of attributes to copy is defined in the Active Directory schema. Attributes that should be copied when the object is copied have a 16th bit set in the seachFlags…

DESCRIPTION

This script sample demonstrates how to copy additional attributes on user copy.

In script sample, change arrAttributeList to list of your additional attributes

Note This code may use functions from the Active Roles Script Policy Best Pra…

DESCRIPTION

Active Roles has the ability to move a user account between domains, but by default, this ability is hidden on the user interface. Possible, an error will be raised during cross-domain moving if a moving user is a member of a global group…

DESCRIPTION

Re-locates users in the TestOU Users container according to the value set in the edsvaLOS-U attribute.

Note This code may use functions from the Active Roles Script Policy Best Practices. Please, follow the link to obtain instructions and…

DESCRIPTION

The corporate policy may demand all newly created user should be located in special OU This script demonstrates how to meet this requirement.

Note:  Check "Wait while post-event handlers complete operation" checkbox on policy entry UI.…

DESCRIPTION

Validate moving operations. Apply this script policy to the Active Directory node.

Note This code may use functions from the Active Roles Script Policy Best Practices. Please, follow the link to obtain instructions and code for those functions…

DESCRIPTION

Here's what I put together for creating and renaming our users. It does the following:

1. Creates home drives in two different locations based on the first letter of the SamAccountName (A-L and M-Z). It creates the folders and handles the…

DESCRIPTION

This script demonstrates how to populate specific user attributes based on a change in a different user attribute.

Note This code may use functions from the Active Roles Script Policy Best Practices. Please, follow the link to obtain instructions…

DESCRIPTION

This script policy sample stamps the "manager" attribute (DN syntax) by given "manager' employee id" value during user creation and modification.

The sample assumes that the user class schema is extended by edsvaM…

DESCRIPTION

No description

Note This code may use functions from the Active Roles Script Policy Best Practices. Please, follow the link to obtain instructions and code for those functions.

SCRIPT

'**************************************************…

DESCRIPTION

This is an example of a script-based PVG-policy with a possible values list. It may be used instead of a regular PVG-policy to provide more functionality.

Note This code may use functions from the Active Roles Script Policy Best Practice…

DESCRIPTION

This is a simplified version of the script-based PVG-policy with a possible values list.

Note This code may use functions from the Active Roles Script Policy Best Practices. Please, follow the link to obtain instructions and code for those…