workflow wchich prevents creaetion any object in specifc OU

Question

Hi, I have "Application" OU under it I have a lot of APP-0000 OU. every APP-0000 OU has 3 other OU: let;s call it a,b,c. I would like to have workflow which prevents creaetion any object in OU 'c'. 
 
 Let's imagine: 
 Application -App 1 OU 
 
 a 
 b 
 c 
 
 -App 2 OU 
 
 a 
 b 
 c 
 
 -App 3 OU 
 
 a 
 b 
 c 
 
 -App 4 OU 
 
 a 
 b 
 c 
 
 -App 5 OU 
 
 a 
 b 
 c 
 
 In every C OU I would like to have Workflow which prevents creaetion any object. 
 I thing I should have something like: 
 START -> If-Else Branches and then If Else OU='c' then Stop/Break, if OU=other then GO ahead. 
 I have issues with Configuration - how to configure it so it will be applied only to 'c' OUs. 
 
 Thanks,Sus

Stu.Pollock · Answer

Hi Sus 
 If you want to filter via the if/else activity within a workflows activities, one way to do this would be with a script module. 
 You'd create a script with similar code to the below: 
 function Get-Value()
{
 $SearchValue = "C"
 $WorkingParent = $Request.parent
 $WorkingParent = $WorkingParent.replace("EDMS://","")
 $WorkingParent = $WorkingParent.replace("OU=","")
 $ArrWorkingValue = $WorkingParent.split(",")
 $WorkingParentName = $ArrWorkingValue[0]
 
 if($WorkingParentName -eq $SearchValue)
 {
 return $true
 }
 else
 {
 return $false
 } 
} 
 Then within your if branch when adding your condition 
 
 Select "Value generated by rule expression" 
 Click "Add entry" 
 Click "Value generated by script" 
 Click "Select" next to "Script module" 
 Browse to your script, and selected it 
 Click Ok 
 Choose the function to call from the "script function" drop down (combo box) 
 Click Ok 
 Click Ok 
 Set your operator to "equals" 
 Click "Define value to compare to" 
 Click "Text string" 
 Enter True 
 Click Ok to accept and close the If branches properties. 
 
 Another option would be to use the same script, and condition, but apply it as a Workflow start condition (Filtering Condition). 
 Other options would be to ensure that the people you don't want to be able to create in those OUs are not granted permissions to create via Access Template (perferrably not via a Deny, but by not being granted permissions to create in those locations in the first place). This way the Create options are not even shown to them* 
 * as long as they are not DSAdmins (Active Roles Admins) 
 Hope this helps 
 Stu