0 votes

We're trying to setup a new action in our Web interface that runs on User's that are currently in an OU called 'New Starters' that is in all of our domains (An integration with our HR system creates accounts with all details completed into these OUs)

I've tried creating an LDAP filter: (distinguishedName=OU=New Starters)Annotation 2020-02-07 101536.jpg

But this just returns no results, There are no other fields we can use that are unique to accounts in those OUs

by (850 points)

1 Answer

0 votes
by (169k points)

Hello Richard,

Unfortunately, there is no such possibility because it is not allowed to use wildcards for DN syntax properties in LDAP filters. However, thank you for the suggestion, we will consider it.

As a solution, you can create a separate Web Interface action for each OU and specify the OU in the Allow selecting only AD objects located under field.

0

Ahh ok, thanks for the info. If we used a scheduled task to add a custom boolean attribute to all Users in those OUs could we create an LDAP filter on that custom attribute?

0

Hello Richard,

Unfortunately, this approach will also not work as Adaxes custom attributes cannot be used in LDAP filters. However, you can set any Active Directory property that is not in use no a specific value and then build an LDAP filter based on the property and its value.

Related questions

0 votes
0 answers

Before Deactivation of an Account on the Webinterface our Help Desk need to change the AD User Description manually. Is it possible to force a manual change before deactivation ?

asked Feb 7 by lv01 (250 points)
0 votes
1 answer

Hello We are using the Computer Manager security role and have given access to this group of staff to a web console, what I can't get working is getting it to display the ... else like OS, service pack, role are displaying OK. Can you help please? Thank you.

asked Feb 4, 2015 by CBurn (3.3k points)
0 votes
1 answer

I have a feild called Decommissioned Date and I can not figure out how to run a scheduled task the day after that date. So If an account got decommissioned today I want the task to run tomorrow.

asked Jan 9 by hgletifer (5.4k points)
0 votes
1 answer

Hi, I had to create Custom Command for distribution group creation. Default group creation wizard cannot be used, because we need some of parameters to be mandatory etc. Anyway I ... which shouldn't be targeted to any particular AD object. How do I do it?

asked Jan 20 by KIT (1.8k points)
0 votes
1 answer

Like remove all users from full access other than User1, User 2, & User3?

asked Oct 29, 2019 by hgletifer (5.4k points)
2,087 questions
1,855 answers
5,220 comments
1,943 users