Send E-mail on Adding Members to Specific Groups
With the help of Adaxes, it is possible to automatically send e-mail notifications of any operation performed in Active Directory. In this tutorial, you will learn how to configure Adaxes to automatically send an e-mail when a new member is added to specific Active Directory groups. This is useful, for example, if you need to control the group membership of critical Active Directory groups.
To send e-mail notifications about new group members, you need to create a Business Rule that will be automatically executed after a member is added to an AD group.
Launch Adaxes Administration
Console, right-click your Adaxes service, point to New and click
Business
Rule
. The Create Business Rule wizard will open.
Enter the name
for the new Business Rule and click Next.
Here you need to
specify when the new Business Rule must be executed. As we want to send notifications
after a member is added to a group, do the following:
- Select Group in the Object Type list.
- Select After in the Operation section.
- Select Adding a member to a Group in the Operation section and click Next.
At the next step, you need to specify what the Business Rule will do when a member
is added to a group. To add the 'Send e-mail notification' action to the Business
Rule, do the following:
- Click the Add Action link.
- In the dialog that opens, select the Send e-mail notification action.
- In the To field, specify semicolon-separated e-mail addresses of the notification recipients. To send this notification to all members of the group, to which a new member is added, provided that this group has an e-mail address established, you can use value reference %mail%. This value reference will be replaced with the e-mail address of the group.
- In the Subject filed, specify a subject for the notification.
- In the Text filed, specify the notification text.
- Click OK.
Group Name: %name%
New Member: %member%
Initiator: %initiator%
After replacing value references, the notification text will be as follows:
Group Name: Enterprise Admins
New Member: CN=John Doe,CN=Users,DC=example,DC=com
Initiator: aaron.dorben@example.com
Add 'Oliver Brune (example.com\HR Department)' to 'EMEA Group (example.com\HR Department)'.
Optionally, you may want the Business Rule to send e-mail notifications, only if
certain conditions are met. For example, to send notifications, only if the user
who performed the operation is not a member of a specific AD group, do the following:
-
Select the action/condition set (click the created action to highlight the set)
and click the
Add Condition icon.
- In the dialog that opens, select the If the initiator is a member of <Group> condition type.
- Select is not in the drop-down list located in the Condition Parameters section.
- Click the Select Group button and select the group you need.
- Click OK.
When finished, click Next.
Here, at the Activity Scope page you need to specify, for which AD groups
the Business Rule will send notifications. Click Add.
In the Business Rule Activity Scope dialog that opens, select one of the
following items:
-
All Objects - select if you want this Business Rule to send a notification,
if a member is added to any group located in any AD domain managed by the Adaxes
service.
-
Specific Domain - select if you want this Business Rule to send a notification,
if a member is added to any group located in the AD domain you specify.
-
OU or Container - select if you want this Business Rule to send a notification,
if a member is added to any group located under the selected OU or container.
-
Group - select a specific group, if you want this Business Rule to send a
notification, if a member is added either to this group or to a group that is a
member of this group. Once selected, you will need to specify the assignment scope
in the Assignment Options dialog.
Assignment Options
To send a notification if a member is added to the selected group only, select This Group object .
To send a notification if a member is added to a group that is a member (direct or indirect) of the selected group, select Members of this Group.
To send a notification if a member is added to a group that is a direct member of the selected group, select Direct members only.
-
Business Unit - select a Business Unit, if you want this Business Rule to
to send a notification, if a member is added to a group that is a member of the
selected Business Unit. To view available Business Units, select the Business Units
item in the Look in drop-down list.
Select the item you need and click Add. When finished, click OK.
The specified activity scope items will be displayed in the Assignments list.
Click Finish.
Now, when the Business Rule is complete, every time a member is added to a certain AD group (no matter in which way - using Administration Console, Web Interface, via PowerShell scripts, etc.), Adaxes will automatically send a notification to the specified recipients.
To enable Adaxes to send e-mail notifications, you need to configure the outgoing mail settings for your Adaxes service:
- Right-click your Adaxes service and click Properties in the context menu.
- Click the Mail Settings tab and change the SMTP settings.
