0 votes

I have read the previous posts regarding useraccountcontrol but they dont seem to apply to my situation. Here is what I am looking for

Report - a scheduled report that finds useraccountcontrol set to 544 - I can't seem to find that attribute when browsing the attributes in Adaxes.

A task that will change a useraccountcontrol entry value of 544 to 512 - but again I cannot seem to see that attribute.

Any ideas on this?

by (280 points)

1 Answer

0 votes
by (215k points)

Hello,

I can't seem to find that attribute when browsing the attributes in Adaxes.

The Display Name for the attribute in Adaxes is Account Options. The userAccountControl property appears under this name everywhere in Adaxes.

Report - a scheduled report that finds useraccountcontrol set to 54

Currently, you cannot create a custom report in Adaxes or generate reports on a scheduled basis: both the features are in our TODO list. However, there is a workaround. For example, you can create a Scheduled Task that would use a PowerShell script to find all users who have the Account Options property set to 544 and generate a report on such users. Then, it would send the report by e-mail.

For information on how to search user accounts in scripts, see Searching User Accounts.
For information on how to send e-mail messages from scripts, see Sending Emails and SMS.
If you need assistance with the actual script, we can help you.

A task that will change a useraccountcontrol entry value of 544 to 512 - but again I cannot seem to see that attribute.

If we got you right, you want to create a Scheduled Task that will change the value of the Account Options property to 512 for those users who have it set to 544. If we are right, to create such a Scheduled Task:

  1. Create a new Scheduled Task.
  2. On the 3rd step of the Create Scheduled Task wizard, select the User object type.
  3. On the 4th step, add the Update the User action and click Add.
  4. In the Add Property Modification dialog, expand the Property to modify drop-down list and select the Show all properties option.
  5. Select the Account Options property.
  6. Click the button embedded in the New value field.
  7. Check the Normal account flag.
  8. Click OK 3 times. This will set the Account Options property to 512.
  9. Now, you have to add a condition to change Account options only when the Account Options property is set to 544. Double-click Always.
  10. Select the If <property> <relation> <value> condition.
  11. Expand the <property> drop-down list and select the Show all properties option.
  12. Select the Account Options property.
  13. Select If Account Options equals and click the embedded Edit button.
  14. Check the Normal account and No password is required flags and click OK two times. This will check whether the Account Options property of a user account equals to 544.
  15. Finish creation of the Scheduled Task.
0

Thank-you this solved my issue. I could not find the correct set of attributes in Adaxes and your screen prints pointed me in the right direction.

I have been using Adaxes for about 4 months and it is a TERRIFIC product.

Related questions

0 votes
1 answer

I belive we may have opened a ticket for this question in the past but I can't find the answer. We have a need to delay changing user attributes until their ... title, and department until the scheduled date. Any help would be much much appreciated. Thanks!

asked 3 days ago by trwhalen (70 points)
0 votes
1 answer

I am trying to view AD authentication logs to see a user account's authentication attempts. Can this be done in Adaxes?

asked Dec 30, 2021 by Tfarmer (40 points)
0 votes
1 answer

Hi, just to be sure, could you confirm that Adaxes is not affected by CVE 2021 44228 ? Regards,

asked Dec 14, 2021 by fdn (20 points)
+1 vote
1 answer

Good morning Support, I'm trying to connect to our AzureAD service as specified in the GetAzureAuthAccessToken(String) section ofCloudServices SDK - https://www.adaxes.com/sdk/ ... m working on a process to simply remove users from Cloud groups. Thank you!

asked Dec 3, 2021 by TheOtherBrian (70 points)
0 votes
1 answer

Here is what i have been trying with Set-ADUser -Identity $user -Clear "extensionAttribute5" Set-ADUser -Identity $user -Add @{extensionAttribute5 = "NoLicenseNeeded"}

asked Nov 29, 2021 by Markh (20 points)
2,629 questions
2,364 answers
6,272 comments
961,925 users