Notification when Group owner is disabled

Question

I would like to send an email notification when a user, who is a group owner, account is disabled.

Answer 1

Hello,

That can be easily done with the help of a Scheduled Task. To check whether the group owner is disabled, you'll need to use a PowerShell script. To create a Scheduled Task that will send a notification if a group owner is disabled:

1. Create a new Scheduled Task.

2. On step 3 of the Create Scheduled Task wizard, select the Group object type.
   

3. On step 4, add the Send e-mail notification action.

4. In the Action Parameters, specify the e-mail message text, subject and recipient.
   

5. Click OK.

6. Double-click Always.

7. To use a PowerShell script as a part of a condition, select the If PowerShell script returns true condition.

8. Paste the following script in the Script field:
   

    $Context.ConditionIsMet = $False
   
    try
    {
        $ownerDN = $Context.TargetObject.Get("managedBy")
    }
    catch
    {
        return # no owner
    }
   
    $owner = $Context.BindToObjectByDN($ownerDN)
   
    if ($owner.AccountDisabled)
    {
        $Context.ConditionIsMet = $True
    }
   

9. Enter a short description for the script and click OK.

10. Finish creation of the Scheduled Task.