0 votes

I’m trying to create a business rule that is executed before a user is created. I used the Adaxes tutorial “Run PowerShell Script after Creating a User” for reference. The script executes when using the “Run…” button in the script window. “Run as” is set to Adaxes service account. When I try to create a user through the “Administrator” web interface, the business rule is recognized and tries to execute. However, I get an “Access Denied” error when the script tries to execute.

Are there permissions I’m forgetting somewhere? Thanks in advance for the assistance.

by (320 points)
0

Hello,

For troubleshooting purposes, please, post here or send us (support@adaxes.com) the following:

  • A screenshot of the business rule you have.
  • A screenshot of the error message you are facing.
  • The script you are using in TXT format.

Any additional details will be much appreciated.

0

Hello,

Thank you for your response. I have provided additional details through support@adaxes.com.

1 Answer

0 votes
by (270k points)

Hello,

Thank you for the provided details. The issue occurs because the account used to register your domain in Adaxes does not have required permissions to create new users. By permissions here we mean native Active Directory permissions, not those granted by Adaxes security roles. For information on how to check/change the account, have a look at the following help article: https://www.adaxes.com/help/ChangeManagedDomainServiceAccount.

Related questions

0 votes
1 answer

Hi team, I need to update users extensionAttribute6 after adding or removing them from a specific group. This is my setup: Group is updated based on rule set within Adaxes ... would like to update users after they were added or removed from this group. Thanks!

asked Sep 25, 2023 by wintec01 (1.1k points)
0 votes
1 answer

Let's say I have a Business Rule that is fired prior to adding members to a group. Is it possible to get the number of objects being added to that group as ... that tells me that 6 objects will be added or is each added user treated completely independently?

asked Apr 20, 2022 by ngb (220 points)
0 votes
1 answer

I've modified the script here https://www.adaxes.com/script-repository/import-users-to-be-deprovisioned-s3.htm to do bulk deprovisioning of accounts via a .csv file. It ... share and folder. Why is this throwing this error? They path works in file explorer.

asked Mar 26, 2021 by johnsonua (390 points)
0 votes
1 answer

I have created a Business Rule (call it BR1) that occurs After adding or removing a member from a group . For testing purposes, it currently runs a PowerShell script ... the Business Rule I created. Is this expected behavior? Or am I doing something wrong?

asked Apr 12, 2023 by alex.vanderwoude (60 points)
0 votes
1 answer

Hi Forum, I have another quick question. There's a Business Rule with an Approval on Adding Users to certain Groups. Is it possible to trigger this Business Rule when ... scope from a Powershell script (add-admgroupmember ...)? Thanks for your Help Cheers

asked Oct 26, 2015 by esoAdxAdmin (650 points)
3,326 questions
3,025 answers
7,723 comments
544,675 users