0 votes

We have users with group memberships in multiple domain. All groups are type Universal. For example we have DOMAIN A and child domains for each dept, such as DOMAIN AB, Domain AC etc..... When doing copy user operation in Domain AB (child domain for DomainA), the membership of domainAB Universal groups is copied but not membership of DomainA groups and domain AC groups for this user. Can Adaxes be configured to retain all group memberships during user account copy, including memberships from other domains?

Thank you,

by (20 points)
0

Hello,

If the Copy group membership option is selected, the new user is made a member of all the groups the source user is a member. For troubleshooting purposes, please, specify the following:

  • How exactly do you copy users?
  • Did you try to perform the copying when signed in with the credentials of the Adaxes service account (specified during Adaxes installation)? Is the behaviour the same?
  • Do you face any error messages? If you do, please, post here or send us (support[at]adaxes.com) screenshots.
  • How do you check that the new user is not a members of the groups located in the parent domain? Could you, please, post here or send us (support[at]adaxes.com) screenshots?
  • What version of Adaxes are you currently using? For information on how to check it, have a look at the following help article: https://www.adaxes.com/help/HowDoI.ManageService.CheckAdaxesServiceVersion.html.

Any additional details will be much appreciated.

0

Yes, I tried copying with service account and my priviledged account, same issue. Yes, the error I get is "The specified group type is invalid. (server: mydomain.com). I compare the group membership after copy operation and verify that the user is not member of the same groups.. We are running version 2019.2 (3.12.17423.0 64 bit) Thank you!

0

Hello,

Could you, please, specify the scopes and types of the groups for which the error occurs?

Also, please, post here or send us a screenshot of the operation execution log. To take the screenshot:

  1. Launch Adaxes Administration Console.
  2. In the Console Tree, expand your service node.
  3. Select Logging.
  4. In the Result Pane on the right, right-click the Create operation for a user for which the issue occurred.
  5. In the context menu, click Properties.
  6. Resize the dialog box so that the full contents of the Execution log section is visible.
  7. Take a screenshot.
  8. If the section contents cannot fit the screenshot, select the contents using Ctrl+A, copy it and post here or send to us as plain text.

Please log in or register to answer this question.

Related questions

0 votes
1 answer

Our Help Desk currently 'mirrors' the group membership of a new user based on another existing user in our AD. I'd like to be able to automate this so that the initiator ... and 'paste' it on the new user being created. Any help on this would be appreciated!

asked Apr 21, 2020 by RayBilyk (180 points)
0 votes
1 answer

Like remove all users from full access other than User1, User 2, & User3?

asked Oct 29, 2019 by hgletifer (1.2k points)
0 votes
1 answer

I would like users to use Adaxes to add themselves or others to a group, but instead of it just working, it has to go thru an approval process and be approved by the group owner before they are added. Thanks!

asked Jun 30 by RayBilyk (180 points)
0 votes
1 answer

Is there a way to get the name of the user who approved a request and supply that to a step inside of a custom command? For example, HR submits a status change for an employee. ... and pass it as a param in a custom command that is called in one of the steps?

asked May 12 by davfount90 (20 points)
0 votes
1 answer

Hi All, We are looking at using Adaxes however would like to be able to see the Adaxes logs within McAfee SIEM. Has anyone tried and tested this and could give any ... monitoring. Does Adaxes have a preferred route to get logs to the SIEM? Many Thanks!

asked Apr 8, 2020 by antondubek (440 points)
2,527 questions
2,272 answers
6,087 comments
513,377 users