This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How do I force an ActiveRoles admin to have to re-populate the department field after an AD account move?

We currently have an ARS Policy that means that when one of our Admins is creating a new user account, that they are forced to choose from a set list of departments so that our Outlook Address Book remains clean.

However one of our customer-organizations has user accounts on our AD too -- in a different OU --- and, as you'd expect, they have a different list of departments to choose from.

This means that occasionally we have to move users between the two OUs.  Unfortunately, when this happens the department from the source OU remains 

Is there way of making use of the "onPostMove" event to clear the contents of the "department" field, so that once the account is moved, the administrator is forced to choose a department that meets the policy requirements of the new OU.

I've tried making use of each of the following, but to no avail.

Request.PutInControl("mrc-control-department", 3,"") 

or

Dim objUser
Set objUser = GetObject(DirObj.ADSPath)

Const ADS_PROPERTY_UPDATE = 2

objUser.PutEx ADS_PROPERTY_UPDATE, "department", ""
objUser.SetInfo

but to no avail.

Parents
  • Does your policy enforce a default value?  If not, then this is likely the problem.

    From an overall process perspective, you probably need to look at notifying an admin when the user gets moved.  The notification would tell them to go and set the department to the correct value (unless of course you have some logic you could implement to do this automatically).

Reply
  • Does your policy enforce a default value?  If not, then this is likely the problem.

    From an overall process perspective, you probably need to look at notifying an admin when the user gets moved.  The notification would tell them to go and set the department to the correct value (unless of course you have some logic you could implement to do this automatically).

Children
No Data