Browse By Tags

  • Computer Dynamic Group Membership Rule Distinguished Name


    I want to create a dynamic group including all computers with a Distinguished Name containing "CRETEIL".
    Unfortunately, the membership rule "Computer distinguishedName Contains CRETEIL" doesn't return any items while many computers have…

  • Cross domain members don't inherit group delegated rights


    I have two ARS managed domains which are in the same forest. Let's pretend domain1 and domain2.

    I also have two groups, domain1\read-domain1 and domain2\read-domain2 which have the rights "All Objects - Read All Properties" respectiv…

  • web interface tree menu edit.

    I am running 7.4 and would like to remove a few links from the menu/Views.   I was able to see a forum post on Tree but Not Views.   Another idea was to get rid of this whole section or collapse and not be able to expand.

    Example all i would like is.

    • Active…
  • New-QADComputer userAccountControl Active Roles

    I noticed that with Active Roles 7.4.3.and 7.4.1 that the New-QADComputer commandlet is ignoring userAccountControl values.  It will only set 4128 PASSWD_NOTREQD

    We have a ARS policy that will enforce 4096, and the MMC and WebUI appear to set it, but in…

  • Error while undo-deprovisioning users

    I got ARS upgraded to 7.4.3 upgraded to our test environment, during testing i found out i get an error while doing a undo-deprovionsing user from the Disabled Users - deprovionsined users container

    The error says 'Built-in Policy - Dynamic Groups' failed…

  • Active Roles 7.3.3 is now available

    Active Roles 7.3.3 is now live on the Support Portal!

    Software and documentation are available at the following location(s):…

  • UnDeprovision In ActiveRoles Sync Engine


    So I can see in the Sync Engine workflows (Old QC)  we have the ability to deprovision a user. we can deprovision if the user doesn't exist in the CSV file.. or trigger a Deprovision based on Field if we are pulling from SQL.

    However, I don…

  • Perform batch operations on User objects from the web client

    Has anyone been able to create a custom command that can be performed against multiple selected objects?  I created a custom command that would set the edsvaProtectFromDeletion attribute to 'TRUE', but this command only appears when a single objects is…

  • Active Roles 7.3.1 is now LIVE on the Support Portal

    Active Roles 7.3.1 is now live on the Support Portal!

    Software and documentation are available at the following locations:…

  • Active Roles 7.1 – Automation for On-Prem AD and Azure AD

    Using the single, familiar Active Roles interface, there is no longer a need to be constantly switching between consoles, and writing complex scripts in an attempt to automate, because Active Roles does it for you. 

    Creation of a user, for example, can…

  • How to Sprint to the Cloud Without Stumbling AKA: Effective IAM for the Hybrid AD Environment

    The cloud isn’t coming — it’s here. And the quicker we all get on board, the better off we’ll be, right?!

    Digital transformation, IT modernization projects and cost-control initiatives all point to the cloud as the easiest, most…

  • Solving the initial password dilemma

    Many times companies use an initial password that is partially or completely static (Summer2017?), or sometimes they use a formula which includes partial data of the user such as the month of birth + the three final digits of their Social Security, etc…

  • Active Roles 7.2.1 public hotfix now available on the Support Portal (KB 247276)

    Active Roles 7.2.1 public hotfix, KB 247276, is now available on the Support Portal:


    This hotfix package address several issues with both Active Roles and the Sync Service.

  • Active Roles 7.2 Language Pack is now available

    The Active Roles 7.2 Language Pack is now available for download here: