0 votes

Hi, we need to create some form (or custom command?) so managers of distribution groups can add/remove/change alias address. Primary and secondary.

Distribution groups are created on local exchange server.

So form has to contains list of current aliases with possibility to edit them...

Thank you Sebela

by (520 points)

1 Answer

0 votes
by (215k points)

Hello Sebela,

Do we understand correctly that users should be able to edit the Email Proxy Addresses property of the distribution groups where they are specified in the Managed By property? If we do, it can be done via a Web Interface action. For information on how to configure the actions, have a look at the following tutorial: https://www.adaxes.com/tutorials_WebInterfaceCustomization_ConfigureActionsPane.htm. You need to use the Edit Exchange properties of Mail-enabled group action. image.png To allow selecting only distribution groups managed by the logged on user, on the Object selection tab of the action select the Allow selecting only AD objects that match LDAP filter checkbox and specify the following LDAP filter: (&(!(groupType:1.2.840.113556.1.4.803:=2147483648))(managedBy=%distinguishedName%)) image.png

On the Available properties tab, select only the properties you need. image.png

If this is not what you need, please, clarify the desired workflow in all the possible details and we will help you. Live examples and screenshots would be much appreciated.

0

About the limiting selection of distribution groups just to their owner. (managedBy=%distinguishedName%) filter is nice, but useless if manager is AD group (which contains logged on user). How can I modify the filter (or use another approach) for i to work with this kind of situation?

Thanks

0

Hello,

When group owners are specified using a group the logged on user is member of, there is no possibility to filter out managed objects using a simple LDAP filter. As a workaround, you can build the filter using a PowerShell script in a Scheduled Task and store it in a custom attribute (e.g. CustomAttributeText1) of the users that are group owners. For an example, please, have a look at the following script from our repository: https://www.adaxes.com/script-repository/create-ldap-filter-to-find-all-objects-managed-by-user-s268.htm. Should you have issues updating the script to meet your needs, please, provide us with all the possible details and we will help you.

As the LDAP filter for the object selection of the Web Interface action you should specify the value reference to the custom attribute (e.g. %adm-CustomAttributeText1%). image.png

Related questions

0 votes
1 answer

Is there a way to get all Exchange Groups and its members in specific OUs? let´s say the it coordinator of a specific OU wants to get a report of all his exchange groups and ... ! I need this for a scheduled report, but i found nothing. can you help me here?

asked Sep 29, 2020 by m_st (200 points)
0 votes
1 answer

Hello, I would like to create a custom command "Add domain user to local admin group". The powershell command to execute this is quite easy. Where I'm struggling is another ... exist. Is it possible to create such a task without a custom form? Many thanks.

asked Aug 29, 2017 by HorstR (460 points)
0 votes
1 answer

In the user creation entry I have added a renamed custom attribute called Start Date so that the requester can only request accounts be created past a certain relative ... a limitation of the product or am I looking to implement this requirement incorrectly?

asked May 28, 2021 by manomano (60 points)
0 votes
1 answer

Hi there, we are already successfully using the password self service via webinterface for our ad domain users. In addition to this are we in the testing phase of the password ... has the same problem and maybe can report how they solved it. Thanks in advance.

asked Oct 27, 2021 by khess (20 points)
0 votes
1 answer

Hi, I came across this in the SDK for setting the OU in a Business Rule before object creation $destOU = $Context.Action.TargetContainer if ($destOU.AdsPath.Contains("Marketing ... OU before creation, rather than create it then move, is there a way? Thanks,

asked Apr 25, 2014 by dazbo (390 points)
2,797 questions
2,530 answers
6,594 comments
56,828 users