0 votes

Hi there,

I would like to allow for my support team to disenroll some user from SelfService Password Policy.

Is it possible to allow via web interface?

Thanks!

Lopes

by (100 points)

1 Answer

0 votes
by (215k points)
selected by
Best answer

Hello Lopes,

Yes, sure. For this purpose you can create a Custom Command that disenrolls a user. To create it:

  1. Create a new Custom Command.

  2. On step 2 step of the Create Custom Command wizard, select the User object type.

  3. On step 3, add the Run a program or PowerShell script action and paste the following script in the Script field:

     if ($Context.TargetObject.IsEnrolled)
     {
         $Context.TargetObject.DisenrollUser()
     }
  4. Enter a short description for the script and click OK.

  5. Finish creation of the Custom Command.

0

Hi Support,

It's working. Thanks!

Lopes

Related questions

0 votes
0 answers

I'd like to implement an architecture whereby all Domain Users can request membership in any domain security group. I'd also like to allow the OU Owners to have ... from their groups without granting them the ability to remove users from all security groups?

asked Mar 25, 2020 by sirslimjim (400 points)
0 votes
1 answer

I would like to change department without a script just yet if possible on multiple accounts. If I cant do this then I will entertain custom script Thanks :)

asked Nov 23, 2021 by will17 (330 points)
0 votes
1 answer

Hi we have bunch of custom commands that HR uses, to create new user employee or offboard someone. They can see the execution log on the web interface, but we would like to recive a copy of the log in an email to IT to make sure there arent errors etc.

asked Jun 30, 2021 by TJ_Umredkar (140 points)
0 votes
1 answer

My situation is we give user's mailbox delagation without automapping somewhat randomly so in the web ui form we would like them to be able to select ad users in the input field

asked Jan 18 by Keonip (160 points)
0 votes
1 answer

Every manager has an overview, where you can see to whom he/she is reporting to and who is reporting to the manager. This will be visible in Microsoft teams ... purpose for this is to use it for email communication (account/password expiration notifications).

asked Jul 4 by RoBeDi (60 points)
2,779 questions
2,512 answers
6,574 comments
26,131 users