0 votes

Hello,

I'm using this script as part of a deprovisioning process https://www.adaxes.com/script-repository/disable-all-computers-managed-by-a-user-s29.htm

I'm using it in a Business Rule After disabling a user account.

The script executes with no errors, but the computer managed by the user remains enabled.

by (250 points)
0

Hello,

As per our check, the script works exactly as intended. Could you, please, specify whether you have Adaxes service installed in the very same domain that is managed by the service and where the computers and the user are located?

0

I have the Adaxes service installed on the same domain as the user and computer.

The User is in a 'Users' OU and the computer is in 'All Computers' OU, like so:

  • CORP.net
    • Users
      • User1
    • All Computers
      • Computer1

Computer1 is managed by User1, however when User1 is disabled Computer1 remains enabled.

It's my understanding that the script should disable Computer1?

0

Hello,

Yes, your understanding is correct. Can you see both the user and the computer in Adaxes Administration Console? Did you make sure that the Business Rule executing the script is effective for the user? For details on how to check that, have a look at the following help article: https://www.adaxes.com/help/?ManageBusinessRules.ViewBusinessRulesEffectiveForADObjects.html. Additionally, for troubleshooting purposes, please, do the following:

  1. Launch Adaxes Administration Console.
  2. In the Console Tree, expand your service node.
  3. Right-click Active Directory and then click Find. image.png
  4. Activate the LDAP Search tab.
  5. In the LDAP filter field, enter the following: managedBy=<userDN>, where <userDN> is the distinguished name (DN) of the user for which the script was executed. For information on how to get the DN, see https://adaxes.com/sdk/HowDoI.GetDnOfObject. image.png
  6. Click Search. image.png
  7. Is the computer that should be disabled displayed in search results?
0

Hello,

I have confirmed the business rule is effective for the user. I have the script as an action set on a larger business rule.

All other actions for the business rule work except for the computer disable script.

I have done an LDAP search and confirmed the computer is showing up as a managed object for the user.

Thanks Ben

0

Hello,

Thank you for the provided details. For further troubleshooting, please, do the following:

  • Post here or send us (support[at]adaxes.com) a screenshot of the Business Rule that executes the script.
  • Re-disable the user and post here or send us (support[at]adaxes.com) a full screenshot of the Execution log that will be displayed.

Please log in or register to answer this question.

Related questions

0 votes
1 answer

Is it possible, using a business rule, to reassign a user's direct reports to their manager when they get disabled? For example, User B reports up to User A. User B gets disabled and all of their direct reports automatically get assigned to User A. Thanks

asked Jul 6, 2020 by bavery (250 points)
0 votes
1 answer

I'd like to be able to either send an email report or export a CSV of all of the business rules carried out when a user is disabled. This would be ... Management Activity section but this includes things that weren't part of the disable operation. Thanks

asked Feb 19, 2020 by bavery (250 points)
0 votes
1 answer

Hello, I need some advice. I'd like to create a specific After user creation action, but I don't know exactly how. In our environment a new user need to assign a MS365 ... 313/create-user-mailbox-in-office-365 Will it work in 2020? Thank you for your answer.

asked Dec 14, 2020 by the7thever (50 points)
0 votes
1 answer

Currently, when I disable a user account in Adaxes, the group memberships of the user remain intact. I'd like to automate the removal of group memberships such as distribution ... a list of groups/DL that the user was previously in and removed from. Thanks!

asked Nov 3, 2021 by jayden.ang (20 points)
0 votes
1 answer

We have a process that when a new user is created they are emailed their username and apssword. If the user is in an Admin Group they are then sent an email with some PDFs ... you can send emails, but am unable to see where it could attach files to the email?

asked Sep 3, 2020 by dknapp (100 points)
2,779 questions
2,512 answers
6,574 comments
25,881 users