0 votes

We're finding more and more that we would like the ability to configure a home page action that can target objects from multiple OUs.

In other words, under "Object Selection" | Allow users to select the object to view | Allow selecting only AD objects located under a specific OU or container
- only provides the ability to select one OU.

I couldn't find a way to do this within an LDAP filter but was hoping you all might know a way around this.

Thanks in advance

by (610 points)

1 Answer

0 votes
by (215k points)

Hello,

Unfortunately, it is impossible to build a LDAP filter like you want as Active Directory does not support LDAP DN matching rules.

We suggest the following workaround. You can create a Scheduled Task that will set a certain property of the objects located under the necessary containers to a value that you specify.

Here's an example of such a Scheduled Task that sets the Employee Type property to MyEmployeeType:

Then, when configuring the Target Object for a Home Page Action, you can use the property value that you specified in the LDAP filter field:

That should do the job.

0

Thanks for the response! While not ideal we might have to go this route.

Would this work with custom properties located in the ADAXES configuration DB vs properties that are written directly to the AD object?

0

Hello,

You cannot use Adaxes virtual properties for this purpose as searching by virtual properties is not supported.

0

I tried targeting a Business Unit in the web configuration which essentially joins the objects of both OUs but I'm not able to return any results.

I'm guessing this behavior is expected (targeting BU in a home page action should not work) but is it something that is planned for a future release?

0

Hello,

We don't plan to support that yet, but thanks for the suggestion. We will think about it.

0

Thanks again!

Related questions

0 votes
1 answer

When configuring web page - under "Object Selection" - you can only choose 1 location (OU) when you select "Allow selecting only AD objects located under" - is there a way to have multiple OUs instead - perhaps using a LDAP filter?

asked Feb 2, 2021 by foleyjm (20 points)
0 votes
1 answer

When trying to add multiple groups to a user after searching in the group list we are seeing that selecting one group adds that one then the complete list of groups ... from the search results without the list refreshing not just the first group selected?

asked Nov 12, 2021 by techg (240 points)
0 votes
1 answer

Hello, I want service desk to be able to select from the web interface only groups that are specified in a Business Unit. it is possible to do it (Adaxes 2009.1)? Thanks you.

asked Sep 2, 2020 by tentaal (1.1k points)
0 votes
1 answer

I attempted to use the assisant property. This seems like it will work if i can enable them to have several assistants or maybe another property would work better for this? Is there a way to change the name of that property in the web form?

asked Jan 25 by Keonip (160 points)
0 votes
0 answers

We are unsure how to troubleshoot this error. It happens after a new user is created and then we modify the properties. The code is customized powershell running using a ... adaxes admin but still the same error. Any ideas where we could start to troubleshoot?

asked Apr 27 by mark.it.admin (2.0k points)
2,779 questions
2,512 answers
6,574 comments
25,881 users