Browse By Tags

  • Exchange Properties of users are not getting open for some users

    Hello,

    We are recently facing the issue on few users for whom we are not able to open exchange properties. Other tabs are working fine, but when we select exchange properties in ARS portal after opening user general properties, it takes time and finally…

  • ARS background process

    Hi All,

    I just wanted to know what background process does ARS do to provision objects to AD. Is it LDAP or any scripts that it run in background.

    Thanks,

    zzeet.

  • Workflow - How to set an attribute to the secondary owner's e-mail address of workflow target?

    Hi everyone,

    Does anyone know how I can set an attribute of my choice, to the e-mail address of the secondary owner of the workflow target? 

    So far, I have the following: 

    >>Operation execution: Create User; where secondary owner of workflow target is not…

  • 5 Active Directory Security Best Practices: AKA Check your Shoelaces Before you Start the Race

    Years ago, when I was much younger, skinnier, and tougher, I was a pretty good runner. In fact for a couple of years I was the fastest female marathon runner in the state of Utah (we won’t mention the fact that I’m a guy, and couldn’t get close to the…

  • How can I deny admins the right to reset their own password?

    I have a bunch of users who have (quite properly) the ability to reset passwords.  Unfortunately, a number of them are abusing this ability by resetting (rather than changing) their own passwords so that they keep the same password in spite of the password…

  • get accouts with expired temporal groupmembership

    Hi,

    I want to have all members of all groups in my domain where the temporal groupmembership-EndTime is in the past.

    I used the script above and ended up here...

    Set-QADPSSnapinSettings -DefaultSizeLimit 10

    $groups=Get-QADGroup

    foreach($group in $groups)

    {

  • Access Denied to Web and Admin Console

    Hi all,

    I have been haveing an issue and am hoping to get some insight.

    I have a user account that should have access to both the web console and the admin console but they keep getting prompted for username and password for the webpage. if they type…

  • Dynamic Groups - Membership Rule Strategies

    Hi all,

    We've been having some discussions within our org about our deployment of Dynamic Groups.   Our deployment strategy has been gradual where we have been converting existing groups and issuing Dynamic Groups for all new requests where possible…

  • Unable to update Mail Attribute with ERFM installed

    I have an interesting issue with a VBScript when trying to update the mail attribute.

    Current Setup: 2 AD Forests, 1 is a user account forest and the other is a Exchange resource forest, shadow accounts are in the resource forest and the MsExchMasterAccount…

  • Copy Membership

    Hey everybody,

    I am trying to implement a new function in ARS to copy from user to another (existing) user the group membership of the source user. The Script is working fine in Powershell, but as soon as I try to get it working in ARS I always get an…

  • Workflow - Link to Target Object

    I am working on a new workflow notification and would like to include a link to the target object. This would allow the recipient to quickly open the target object in the web console and view the object's properties.   I dont see an OOB token to handle…

  • ARS build best practice

    I'm wondering if anyone has some suggestions on whether they separate out the mgmt servers from the web interface role for ARS and also what you do for failover/high availability?  I also have multiple sites and does anyone have suggestions on how…

  • Script or Report on accounts scheduled for deletion?

    Hey Group,

    I am new here, but this is a great community!  We have a need to notify some people when accounts will be deleted and this report has to include a couple of attributes of the user account. We've been searchin for a way to do this and the only…

  • Powershell profiles - help

    This community is fantastic, thanks to all for your help learning powershell, ars, and a heap of stuff.

    I want to create a profile that will list all of the modules I have available and the snap-ins that are available as well.  Define the colors for the…

  • SQL report - add-on properties?

    Is there any easy way to add on items to reports from the report pack/qkp? I tried doing some db queries against the data collector db and not being a dba I am not having much luck.  Is there a place to get add-on reports or something that would show how…

  • get-qarsoperation send output to qad-getuser?

    Is this possible? I've tried several things and haven't found anything in the forums or online that shows this will work? I read some other posts people are looking to do the same thing I am, but is it possible to pull the results of changes, provisions…

  • user home folder deletion?

    Hey Folks - I am working on a script that will delete the users home folders when the users AD account is deleted by the ARS built-in scheduled task. The built in process fails to delete the users home folders and we have about 20 file servers that a…

  • script help to delete users and/or home folders?

    I am trying to find a script to delete AD user accounts and/or home folders. I have setup a deprovisioning policy that deletes accounts after x number of days but can't use that on a bunch of other accounts as they were deprovisioned before the policy…

  • Change virtual attribute for multiple users in an OU?

    I am trying to find out how to change a virtual attribute for multiple users, I want to change the deprovision deletion date for many accounts in one OU.  I know how to get the attribute value for a user, but I'm stuck on trying to get this into a script…

  • Use ARS and/or powershell to create groups - nested & add members automatically?

    We use the lousy nested structure for shared folder ntfs permissions where a domain local group contains a universal which contains a global and the global has the users.  I want to find a way to create the 3 groups required when a new folder is setup…

  • Set-qaduser virtual attrib?

    I'm trying to get a script going which I opened another post for, but i can't find a way to set the virtual attribute for even 1 account.

    I've tried several things, I can retrieve the attribute, but nothing has worked to set it, any ideas?

  • Restarting a remote computer via ARS

    I'm looking at giving our helpdesk the ability to remotely reboot/shutdown computers.

    So I went to the WebInterface to shutdown the workstation next to me to see the process.

    I clicked on Restart in the WebInterface and got an error:  "Unable to access…

  • Script to check for changes to group?

    I am trying to write a script or come up with a workflow in ARS that would check the domain admins group and notify when it's been modified.  I think I'm stuck here because if the group is modified using native AD tools then a workflow won't work,…

  • Powershell email - qarsoperation & get-qarsuser?

    Howdy - I am trying to get the results of this query to send to an email list and the formatting is giving me trouble.  I also think I need to take the results of the query and send that to a custom object that I create, is that the best way to do this…

  • Format qarsoperation query & email to DL?

    I was hoping some may be able to give me some assistance with a script that we need. I found some of what I need on this forum and now I want to go to the next level which is to take the query results I get when I run the command below and then put that…