Adaxes Q&A - Recent questions and answers in Active Directory Management with Adaxes

Answered: Portal Form - Read only field

Tue, 14 Jul 2026 14:51:33 +0000

Hello,

That is correct. The behavior remains the same on the user creation form. The only option is to remove the required property from the form and set it somehow else (using property patterns, predefined fields, etc.).

Answered: Username query string parameter no longer works on Sign-in page (worked in 2023 version)

Thu, 09 Jul 2026 14:35:26 +0000

Hello,

Was this intentionally removed from the Sign-in step for security reasons?

Yes, that is correct.

Is there any supported alternative to pre-fill or bypass the username step on Sign-in?

Unfortunately, there is no such possibility and there are no plans for anything like that.

Answered: Web Interface on Domain B fails to connect to Adaxes Service on Domain A

Thu, 09 Jul 2026 09:45:35 +0000

Hello,

Thank you for the provided details. The issue can occur in such a setup in case domain B is not managed in Adaxes. To remedy the issue, try to do the following on the computer in domain B where the web interface component is installed:

Navigate to the folder where the web interface is installed. By default, the folder is C:\Program Files\Softerra\Adaxes 3\Web Interface\App.
Open the appsettings.xml file with a text editor.
Locate the configuration\adaxes.web.ui XML element.

Set the lookupServiceDomainName attribute to domain A.

<adaxes.web.ui adaxesConfigurationSetId="{93294e43-4d1e-41bd-984b-cba6b570a748}" lookupServiceDomainName="domainA.com">
 <trace enabled="false" filePath="${basedir}/adaxes.webui.trace.txt"/>
</adaxes.web.ui>

Save the file.
Check whether the issue persists.

Answered: Adaxes Logging - Portal vs Backend

Wed, 01 Jul 2026 13:34:07 +0000

Hello,

Unfortunately, there is no such possibility. Currently, we do not have plans to add such features. However, thank you for the suggestion. We have forwarded it to the corresponding department for consideration.

Answered: Password Reset Workflow and UI

Mon, 29 Jun 2026 16:23:56 +0000

Hello,

Unfortunately, there is no such possibility in Adaxes 2023.2. However, starting from Adaxes 2025.1 you first need to enter a valid username. Only after that there is a possibility to start the verification for password self-service. On the username step, brute force protection settings apply. For details about the settings, have a look at the following tutorial: https://www.adaxes.com/help/PreventBruteForceAttacks.

Answered: Can Adaxes run on Azure VM to manage EntraID?

Fri, 26 Jun 2026 13:35:00 +0000

Hello,

Adaxes components can only be installed on computers joined to an AD domain. Unfortunately, there is no possibility to perform the installation on Entra-joined devices. To keep using Adaxes, you will need at least a placeholder AD domain.

Answered: Scheduled Task Pre and Post Actions

Fri, 19 Jun 2026 09:02:16 +0000

Hello Sam,

Unfortunately, there is no such possibility. Each object is processed by a scheduled task separately. You can use corresponding conditions in the task itself or business rules triggering before the corresponding operation (e.g. Before updating a user) to perform the required validation.

Answered: Group type in e-mail function?

Tue, 16 Jun 2026 12:43:07 +0000

Hello,

Unfortunately, the only option here is to use a custom PowerShell script. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Answered: Add AES in account options?

Thu, 11 Jun 2026 09:19:05 +0000

Hello,

Unfortunately, there is no such possibility. The checkboxes you pointed out belong to a different property, Kerberos encryption types (schema name msDS-SupportedEncryptionTypes). As such, you can just use a property pattern to set the checkboxes when new accounts are created. The default value should be set to 24.

Answered: Entra ID Extension Property

Wed, 10 Jun 2026 10:52:51 +0000

Unfortunately, managing such attributes is not supported in Adaxes. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Answered: Adjust default value expressions

Fri, 05 Jun 2026 14:39:32 +0000

Hello,

Unfortunately, there is no such possibility. The values depend on the property type. For example, Lockout Time (schema name lockoutTime) is of the Large Integer type. As such allowed values for the property are Unspecified, Never, and a date. There is no possibility to replace any of those with a custom text.

For your information, it is possible to enable displaying certain statuses for accounts. For example, you can enable the Account is locked out status. As a result, when viewing locked accounts, the status will be displayed in the header. For accounts that are not locked out, there will be no status in the header.

Answered: Unable to modify Exchange settings for resource accounts migrated to Exchange Online

Tue, 02 Jun 2026 08:47:04 +0000

Hello,

It is not only about the permissions in a security role. You need to make sure that they are granted over the proper objects, to the proper accounts and assigned over proper scope. The following tutorial should be helpful: https://www.adaxes.com/help/GrantPermissionsToPerformExchangeTasks.

Answered: Staged Upgrade Approach & Version Compatibility Query - Adaxes 2025.1

Mon, 01 Jun 2026 10:08:51 +0000

Hello,

The approach will not work and is highly not recommended. First of all, Adaxes 2026.1 is not compatible with 2025.1. Also, stopping Adaxes services sharing common configuration will produce a lot of errors and might lead to unpredictable results. The only recommended option to test the new version before upgrading the entire Adaxes environment is to install Adaxes 2026.1 on a separate computer. This way you can keep using Adaxes 2025.1 and test the latest version separately. Once the testing is completed, you can just uninstall Adaxes 2026.1 from the separate computer and then upgrade your Adaxes environment if suitable.

Answered: Are Adaxes custom attribute usable in rule based groups

Thu, 28 May 2026 14:50:06 +0000

Hello,

Unfortunately, there is no such possibility. Adaxes custom attributes cannot be used in criteria for search queries. This applies to all places including rule-based groups.

Answered: script development and SDLC ...

Thu, 28 May 2026 08:46:27 +0000

Hello,

Unfortunately, there is no such possibility. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Answered: Adaxes source of Property Patterns for Country

Wed, 27 May 2026 15:21:43 +0000

Hello,

The list of allowed values for the Country property in the built-in property patterns is predefined in the Adaxes installation. However, you can add/remove values from the list. The two-letter code must match the Alpha-2 code in the ISO-3166 standard. Regarding the CS value in the list, thank you for pointing it out. We have forwarded the information to the corresponding department for consideration.

Answered: Are Exchange Online-only MailContacts expected to be visible in the Adaxes directory picker?

Wed, 27 May 2026 10:55:25 +0000

Hello,

Are Exchange Online-only MailContacts expected to be visible in the Adaxes directory picker?

No, they are not expected to be visible. The behavior is by design.

If not, is there a supported way to include these objects in selection (e.g. via custom query or other object type)?

Unfortunately, there is no such possibility. Such objects can only be requested using custom scripts. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Is this limitation related to Adaxes only querying directory objects (AD / Entra), not Exchange recipient objects?

Yes, that is correct.

Answered: Can Adaxes be used without Active Directory?

Fri, 22 May 2026 09:08:39 +0000

Hello,

As of now, Adaxes components can only be installed on computers joined to an on-premises AD domain. There are no plans to change that in the near future. As an option, you can roll out a placeholder on-premises Active Directory domain, join a computer to it, and install Adaxes on the domain-joined computer. Then you can register your Microsoft Entra domain using an application account and manage cloud-only objects in Adaxes. The placeholder domain can reside in Microsoft Entra Domain Services, not only in your on-premises environment.

Answered: Bulk Update of Rule-Based Groups Following AD Restructure

Tue, 19 May 2026 09:09:31 +0000

Hello,

Unfortunately, there is nothing like that. However, the following article might be helpful: https://adaxes.com/sdk/IAdmGroup2.

Answered: SDK Documentation - Export Function or AI Accessibility Improvement

Tue, 19 May 2026 08:47:27 +0000

Hello,

There are currently no plans to implement any exporting function. The documentation is designed to be online, not for export. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

At the same time, it is highly not recommended to use AI for Adaxes scripts. Per our experience it can even write scripts with properties and methods that simply do not exist.

Answered: Update Adaxes from 2023.2 to 2026.1

Wed, 13 May 2026 13:41:38 +0000

Hello,

There are generally no caveats in terms of the upgrade itself. The upgrade process remains the same. However, starting from Adaxes 2025.1, only PowerShell 7 is used to run scripts. If cmdlets from modules that are incompatible with PowerShell 7 are used in scripts, the modules are loaded implicitly in background Windows PowerShell 5.1 processes by the Windows PowerShell Compatibility feature. For details about the feature, have a look at the following Microsoft article: https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_windows_powershell_compatibility?view=powershell-7.5. From the Adaxes standpoint, it means that when such a module is imported, the corresponding powershell.exe process is started and will not be closed until Adaxes service is restarted. To remedy the issue, you need to ensure that only module versions compatible with PowerShell 7 are installed on the computer(s) where Adaxes service runs. For the modules that do not have versions compatible with PowerShell 7, we suggest importing/removing modules explicitly in scripts executed in Adaxes using try/finally blocks. This approach will close the external powershell.exe process when the module is removed in the script. For example:

try
{
    Import-Module ServerManager
    
    # Your code here
}
finally
{
    Remove-Module ServerManager
}

Answered: When someone is using a Custom Command, can you detect (PowerShell) who initiated the CC?

Tue, 12 May 2026 08:29:45 +0000

Hello,

When someone is using a Custom Command, can you detect (WIth PowerShell as Action) "who initiated" the Custom Command?

Yes, it is possible to get the initiator of the custom command execution. For details, have a look at the corresponding section of the following SDK article: https://www.adaxes.com/sdk/ServerSideScripting/#getting-information-about-the-initiator.

I found that you can use e.g.: adm-InitiatorFullName to have the full name of the Initiator, is this correct?

Yes, you can use calculated properties to get the initiator-related properties. For more details about the available initiator-related calculated properties, have a look at the corresponding section of the following SDK article: https://www.adaxes.com/help/CalculatedProperties/#operation-initiator.

Where can we find more info about the object: $Context.Initiator and the properties of this object that are available or are only the %Adm-InitiatorFullname%; ...EMail; ...Dn available?

Please, have a look at the description of the Initiator property in the following SDK article: https://www.adaxes.com/sdk/ExecuteScriptContextClass/#Initiator_details.

Answered: When creating a scheduled task, you select Object type. e.g.: User => can you add extra (LDAP) filters

Mon, 11 May 2026 12:07:37 +0000

Hello,

When creating a scheduled task, you select Object type. e.g.: User but can you add an additional filter, eg. where deparment is a value (HR, IT, ...) or where an extensionAttribute15 equals 'Mailbox'?

Unfortunately, there is no possibility to add filtering for the objects in the Activity Scope. However, you can use conditions in the scheduled task itself. For details, have a look at the following tutorial (step 9 seems to be exactly what you need): https://www.adaxes.com/help/ScheduleTasksForDirectoryManagement.

Can you customize these pop-ups and/or can you during the progress of the CC add an extra pop-up when e.g more information from the requestor is needed?

You can configure the confirmation notification for all custom commands or disable it entirely. The notification can be specified on the first step of the custom command creation wizard. To modify the notification for an existing command, select the command in the Administration console and click Edit next to Confirmation in the top right corner.

Unfortunately, there is no possibility to have pop-ups to request additional details during the process of the custom command execution. It can be only done using parameters as the first step before the execution itself. For details on using custom command parameters, have a look at step 5 of the following tutorial: https://www.adaxes.com/help/CreateCustomCommand.

Answered: Adaxes URL locations

Mon, 04 May 2026 08:40:16 +0000

Hello,

The URL is referencing the Password self-service functionality on the Common Sign In page. The base URL of the page is like http://adaxesserver.domain.com/Adaxes. It is set up in the web interface configurator same as other web interfaces.

Answered: Is it planned to support this AD integrated feature with a future version?

Tue, 28 Apr 2026 08:28:41 +0000

Hello,

Currently, there are no such plans. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Answered: How can I email a newly created user's group membership?

Mon, 27 Apr 2026 09:13:47 +0000

Hello,

Using a PowerShell script is the only option here. The following script from our repository should be helpful: https://scripts.adaxes.com/get-multivalued-property-values-and-send-mail.

Answered: Entra Guest users & sponser attribute within Adaxes

Fri, 24 Apr 2026 11:38:34 +0000

Hello Willem,

Both points are currently under consideration and investigation for future releases. Unfortunately, there is currently no ETA.

Answered: In Adaxes how can I backup a user's group membership before I run through a deprovisioning?

Thu, 23 Apr 2026 14:11:25 +0000

Hello, This is something that can be done using a PowerShell script. For an example of the approach, have a look at Script 3: Remove from all groups and preserve the groups in a file in the following article: https://scripts.adaxes.com/remove-all-group-memberships-for-a-user-account#script-3-remove-from-all-groups-and-preserve-the-groups-in-a-file.

Answered: Can the Exchange Management Tools only be safely installed on an Adaxes Server?

Wed, 22 Apr 2026 13:57:55 +0000

Hello Ray,

Yes, it should be safe to install Exchange Management Tools on the computer with Adaxes components. Adaxes itself does not interact with Exchange Management Tools in any way.

Answered: Where can I find the e-mail body from a approval Email Notifications

Wed, 22 Apr 2026 10:12:01 +0000

Hello,

Unfortunately, there is no such possibility. The body part is generated automatically and there is no possibility to change it in any way. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Answered: Is there any possibility to grant a scheduled task to view ALL pending approval requests?

Thu, 16 Apr 2026 16:42:04 +0000

Hello,

Do we understand correctly that you need to query pending approval requests using a PowerShell script executed in a scheduled task? If we do, there is no need to grant any permissions to a scheduled task. It is executed by the Adaxes service and already has the rights to view all approval requests by default. If this is not what you meant, please describe the required workflow in all the details with screenshots and live examples. You can post them here or send them to support@adaxes.com.

Answered: Does the Backup and Restore backup EVERYTHING?

Wed, 15 Apr 2026 15:20:36 +0000

Hello,

The Adaxes configuration backup includes the service configuration (security roles, business rules, custom commands, scheduled tasks, etc.), web interface configuration, values of Adaxes custom attributes, and a copy of the local SQLite database used for logging. Pay attention, the backup does not include the configuration of the IIS server that hosts the Adaxes web interface. If you configured, for example, HTTP Redirect at the level of the applications, you will need to reconfigure it manually after the upgrade. If you have a stand-alone Adaxes installation, the backup includes everything you need to upgrade Adaxes without losing any configuration objects or logs.

Answered: o365 remove licenses not inherited

Mon, 13 Apr 2026 16:57:05 +0000

Hello,

Do we understand correctly that you mean the Microsoft 365 licenses that are assigned automatically based on group membership? If that is correct, there is no built-in functionality to skip such licenses or suppress the corresponding errors. As a workaround, you can use the Modify properties option of the Activate or modify Microsoft 365 account action. In this case, you can explicitly specify the licenses to be revoked.

Answered: Any alert when an account is added to an admin group?

Mon, 13 Apr 2026 11:22:22 +0000

Hello,

You can create a business rule triggering After adding a member to a group. In the rule, use the Send email notification built-in action to notify required recipients. In the notification, you can use calculated properties (e.g. adm-MemberFullName) to get information about the new group member.

Answered: RC4 is being deprecated

Mon, 06 Apr 2026 14:48:44 +0000

Hello,

The changes to be introduced do not influence Adaxes itself. However, at some point, it might become necessary to reset the passwords of the service accounts (specified for AD domains and/or Adaxes service). After changing the password of a domain service account, the password must be updated in Adaxes as well: https://www.adaxes.com/help/ChangeManagedDomainServiceAccount. After changing the password of the Adaxes service account (specified during Adaxes installation), the password must be updated in the settings of the Softerra Adaxes Service Windows service.

Ghost (email) actions Adaxes

Thu, 02 Apr 2026 13:42:00 +0000

We use Adaxes for our user LifeCyclemanagement Flows.

This flows scheduled actions are running in user context. Recently, users have been receiving emails from severals flows containing incorrect data, even though the account does not meet the conditions to receive these emails. Additionally, other actions in the flow were not executed, and no logging of these actions is visible in Adaxes. The data in the daily overview reports is correct.

Answered: How to specify which objects get licensed

Thu, 02 Apr 2026 08:03:43 +0000

Hello,

Adaxes is licensed based on the total number of enabled and not expired user accounts in all the managed domains. As an option, you can add some users to the unmanaged list so that they are not counted towards license validation. In your case, a scheduled task and a PowerShell script should be the best solution. For details, have a look at section Add automatically in bulk of the following article: https://www.adaxes.com/help/AddUsersToUnmanagedList/#add-automatically-in-bulk.

Answered: Adaxes/Azure client secret expired, now giving me errors

Mon, 30 Mar 2026 13:52:39 +0000

Hello,

The warning is based on the information returned by Microsoft Entra. Most probably, there is some delay caused by the update of the client secret or something else related to replication on Microsoft side. You should be fine with clicking Yes and keep using Adaxes with the new client secret.

Answered: Move-AdmObject Cannot find object: A referral was returned from server

Fri, 27 Mar 2026 10:06:15 +0000

Hello,

It looks like there was an attempt to move a Microsoft Entra account to an on-premises AD OU. Most probably, it happens because the -AdaxesService and -Server parameters are not specified when the Move-AdmObject cmdlet is executed. They are always required when you use Adaxes cmdlets to manage Microsoft Entra objects. To make things easier, you can try using the ADSI approach. For an example, have a look at the following article: https://adaxes.com/sdk/SampleScripts.MovingUserAccounts.

Answered: How would I enforce users only being added to a group I've created from a custom command / script?

Thu, 26 Mar 2026 14:24:53 +0000

Hello,

The easiest way is to just hide the group from everyone except for the users who actually need it. The following tutorial should be helpful: https://www.adaxes.com/help/HideObjectsFromUsers. At the same time, this will work only in Adaxes. Members can still be added to the group externally, e.g. via Active Directory Users and Computers. As such, you will need to eliminate such possibilities as well.

Answered: Should I be able to import remote Exchange powershell into a script? It's seemingly just freezing / timing out.

Thu, 26 Mar 2026 13:36:00 +0000

Hello,

First of all, Write-Log does not work in Adaxes scripts. To make an output, use method $Context.LogMessage. As for connecting to an on-premises Exchange server, have a look at the example in the following article: https://scripts.adaxes.com/connect-to-exchange-with-powershell#exchange-on-premises. We also recommend you to check the following tutorial: https://www.adaxes.com/help/AutomateExchangeMailboxConfiguration. Most probably, the task you need to perform can be done using built-in functionality without using any scripts.

Answered: Do you have a script for creating Azure Entra only accounts in bulk from CSV?

Thu, 26 Mar 2026 13:14:44 +0000

Hello,

Have a look at Script 3: Only create new users from the following article: https://scripts.adaxes.com/import-new-and-updated-users-from-csv-file#script-3-only-create-new-users. Pay attention that in Adaxes Microsoft Entra objects (including OUs) also have DNs.

Answered: Share Mailbox during onboarding without an active directory

Wed, 18 Mar 2026 10:12:43 +0000

Hello Matthew,

Do we understand correctly that it is about Exchange calendar permissions? If so, you can automate the process in Adaxes. The following tutorials should be helpful:

Answered: Property Pattern Regex Validation Help

Wed, 11 Mar 2026 10:40:50 +0000

Hello,

Do we understand correctly that you need to actually allow only English letters and numbers? If that is correct, you can use the following regexp:

^[a-zA-Z0-9]$

Answered: How can I add users to (and remove users from) a group based on the M365 License a user has?

Wed, 11 Mar 2026 10:13:34 +0000

Hello Ray,

Unfortunately, there is no possibility to achieve that making a group rule-based. However, it can be done with the help of a scheduled task like below:

Answered: Display Name in web form

Fri, 06 Mar 2026 11:55:40 +0000

Hello,

Unfortunately, there is no such possibility. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Answered: Does Adaxes provide a calculated last‑logon value for AD and Entra, or must I combine properties myself?

Wed, 04 Mar 2026 12:28:03 +0000

Hello,

It looks like using the If is inactive <period> condition is exactly what you need. For details, please, have a look at the following FAQ article: https://www.adaxes.com/questions/16835/how-does-adaxes-determine-account-inactivity.

Answered: Portal Actions Referencing Moved or Invalid OUs

Wed, 04 Mar 2026 10:46:50 +0000

Hello,

Is there a way to automate this or make the criteria dynamically update when such changes occur?

Unfortunately, there is no easy way to do that. It will require quite complicated custom scripting. Also, you will need to take into account that such updates can be performed outside Adaxes.

Or do we need to manually review and update our actions each time objects are moved or restructured?

Yes, that is correct.

Additionally, is it possible to receive a notification or run a script that checks for invalid or non‑existing objects referenced in action criteria?

Unfortunately, there is no such possibility. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Answered: Get Entra ID / Azure AD properties for a group ...

Wed, 25 Feb 2026 10:27:30 +0000

Hello,

To obtain the identifier, you can use the below script in a custom command, business rule or scheduled task. Pay attention that it will only work on users included into the associated scope of your tenant in Adaxes.

try
{
    # Get the object ID in Microsoft 365.
    $objectId = [Guid]$Context.TargetObject.Get("adm-AzureId")
}
catch
{
    return
}

Answered: Installing Adaxes 2026.1

Mon, 23 Feb 2026 15:19:32 +0000

Hello,

The error looks to be related to your environment settings, not the permissions granted to the Adaxes service account. Most probably, it is about UAC. As an option, you can try running the installation as administrator. To do so, start command prompt as administrator and use the below command. In the command, <path_to_package> is the path to the Adaxes installation package.

msiexec /i "<path_to_package>\adaxes.msi"