Where can I find more information about the Active Roles custom attributes like edsva-MsExch-MailboxType and what are the supported values? Is there a reference for all Active Roles custom attributes and where it is located if there is one?
What would be the best way, if possible, to remove a user from a group Group1_Test whenever they are a member of another group that begins with Group1. For example, I am currently a member of Group1_Test and I am now being added to Group1_Test2. Is there…
I have installed 712 and all of the services. I know the O365 add-on isn't compatible. I've added my tenant and can create Azure AD user and manage the license. Now how do I manage the O365 mail options for a user? There is nothing written, that…
Hi,
its again me regarding the Azure Connector after getting some experiances.
My first question concerns the delta mode when reading AzureAD. This option is mentioned as supported within the Admin Guid but also in the AzureADConnector_ConnectorConfig…
In the process of upgrading our v6.9 to the latest version but there is a burning issue for which our Operations team is looking for a report. The requirement is to gather the list of all user accounts in AD with their EmployeeIDReference and Division…
Hello,
I have the same question as here: https://www.quest.com/community/products/one-identity/f/active-roles/10750/ars-server-collector/29411
But because there are only answers which don't answer the question I'm gonne give it a try.
Can someone…
Hi guys,
Right now we have some new hire and departure workflows set up on a per-user basis, as HR wants the emails to come from them, rather than an HR alias. I was wondering if it's possible to have the from address in a workflow be dynamic based on…
Hello,
I was wondering what Quest product can perform the following functionality, as I need a single product (key word) for Windows 7->10 client & W2K8 R2->W2K16 server, that covers all the below tasks with no user admin rights at all (i.e.…
Hello community,
I upgraded the installation of AR, and connected it to the customer's Azure. The question is: Is it possible to manage cloud only users, o to use Active Roles I MUST create also an on-permise user?
Thanks a lot,
G.O.
We're running two instances of ARS for redundancy and fail over but we're running into issues with debugging, replication, etc because it bounces between the servers when someone connects to the WI.
Is there a way to force the IIS server to only…
Using WI, we are not able to set authOrig, as it gives us this error:
In our 6.9 instance it works just fine, but in our 7.0 instance it only gives this error on the…
Hello
I want to push a boolean FALSE in a Forward Sync Rule in Active Roles Synchronisation Service?
I tried sync new User from a SQL Database to Active Roles. At the sync process I have to fill edsaPasswordNeverExpire with false, because there is a policy…
Hello,
Im trying to get the search results into a mail notification, I can perform actions to the search results (Disable users, change properties, etc) But I can not get the notification to send me users that matched the search condition.
Anyone has…
Hello
We need to generate a workflow that sends daily reports about users matching conditions such as the following:
-Users with 30 days without changing password
-Users with the "User cannot change password" option selected
-Users that do…
Hello,
Can someone tell me how to add a managed unit to self-service webportal in ARS?
I also need to add the search option to the self-service site.
Any assistance is appreciated.
I have both 6.9 and 7 that i use to manage separate domains.
We plan to…
Hi Forum,
I am trying to build a sync workflow from a source AD domain to a SQL Server, using Active Roles Synchronization Service (7.0.3).
I am able to synch user from one source domain to a destination domain. I found lots of resources on that. However…
Using ARS 7 through the web interface, users are unable to search for contacts when adding objects to a distribution list. Users can find the contact in the global search, click the contact's "member of" and add the group that way but when adding a contact…
We've had this problem ever since we've installed ARS 7, we're about to push this out into production but this issue arises every so often. The dynamic CSS of the web interface makes some of the div's on the page huge, like 10000px wide and you get a…
ARS version 7.0 on Windows 2012r2
The question is about Temporal Group modification. I have created a changed workflow which will pickup changes to a specific group. Joining the group requires approval. Once approval is granted, the workflow will add…
Hello Community,
I'm trying to find a way that i can incorporate into my standard Deprovision Policy explained below.
Corp deprovisioning policy for users.
Disable Account
Sets Password Random
Group membership – Remove!
Exchange Mailbox – disable…
We're working on implementing ARS 7.0 (clean install) after having 6.9 for quite awhile. We've kind of hit a snag with our elevated permissions.
We have workstation support that uses temporal membership to "elevate" themselves into a group that…
We have a group that we want to have group approvals. This will computers addded to a group. The problem is the OU is sits in has been excluded from approvals. How can i make this one group have approval
Hi, I am searching for a way to get only back one attribute when querying an object using the SPML provider. It is described that it is possible on the following site but we're struggling to find the correct syntax:
http://documents.software.dell.com…
Hi,
I'm using a scheduled Workflow to first locate and then deprovision inactive user accounts in AD. By itself the Workflow is fine (only using native tasks) and with the option enabled to "Attach a report of workflow execution to notification message…
I am creating a user and trying to use the notification task in a workflow but i need a way to add a different person other than a manager to send to. I have a virtual attrib that has a sam account name that would like to send the notification to. the…
