0 votes

Our network team is working on a system to allow temporary AD user accounts that will be allowed to obtain access to network services. (They are doing this by allowing access to a group called CO_Wireless_LOC_Event_Users).

The process is as follows:

  1. Colleagues submits a ticket to our Help Desk with event name and start/conclusion date.
  2. The Help Desk login to Adaxes, click on "Create LOC Guest Wifi"
  3. Adaxes prompts Help Desk for: a. Colleague name/email (So it knows who to send the username and password to) b. Event name (Username of AD account, avoid spaces) c. Event expiration date (When the AD account will be deleted/disabled)
  4. Adaxes creates the user account in a OU called "LOCGuestWifi" and makes that user a member of the "CO_Wireless_LOC_Event_Users" AD group which wll also have an expiration date for the account and and a randomly generated password.
  5. Adaxes then sends the colleague the username/password and event details in an email.
  6. Because the AD User account has an expiration date, it will automatically disable at conclusion of event.
by (220 points)
0

Hello Ray,

For us to provide you with a solution, please, specify the version of Adaxes you are using. For information on how to check it, have a look at the following help article: https://www.adaxes.com/help/CheckServiceVersion.

0

Product version: 3.14.19312.0

1 Answer

0 votes
by (226k points)

Hello Ray,

Thank you for specifying. To configure the desired workflow:

  1. Create a Web interface action of Create User type. The action should be configured specifically for the LOCGuestWifi OU. image.png On the form the action should only have the required properties including an Adaxes custom date attribute (e.g. CustomAttributeDate1) to specify when the user must be disabled. For information on how to manage Web interface actions, have a look at the following tutorial: https://www.adaxes.com/tutorials_WebInterfaceCustomization_ConfigureActionsPane.htm.
  2. Create a business rule triggering After creating a user. The rule will add accounts created in the LOCGuestWifi OU to the COWirelessLOCEventUsers group. image.png
  3. Create a scheduled task that will be executed daily and disable users in the LOCGuestWifi OU when the time comes. image.png

Related questions

0 votes
1 answer

I have a business rule to create a user in our AD, and then have it create a new O365 account and assign it a license. How can I have it create a temporary password that I specify during that business rule?

asked Jun 17, 2020 by keecit (40 points)
0 votes
1 answer

We have internal AD that syncs to o365 via Azure AD Connect. It is not a hybrid environment; there is no Exchange on site. I am trying to find the best way to use Adaxes to ... so I am not sure the best way to handle that. Thanks for any help you can provide.

asked Apr 15, 2020 by Jasonmh (540 points)
0 votes
0 answers

Is there a mechanism to perform an annual account re-authorization? on an Annual basis, People Managers are required to re-authorize the AD user account permissions there reports have ... Adaxes perform such an action? It appears that it may be able to do so.

asked Feb 17, 2020 by nicolais (20 points)
0 votes
1 answer

We have a business need for automating and controlling the creation of service accounts in our AD. For example, we want all new service accounts to start with "svc_" for ... customize the "New User" form to create a "New Service Account" workflow in Adaxes?

asked Sep 10, 2021 by joshua.lapchuk (50 points)
+1 vote
1 answer

We know only service administrators by default are allowed to access the web configurator, however is there any way to restrict that the the web configurator is only available on ... ON 2FA on Web configurator website, like we can on other web interfaces ?

asked Feb 13, 2021 by rsaran (70 points)
2,780 questions
2,513 answers
6,578 comments
27,291 users