Business rule PowerShell script access denied

I’m trying to create a business rule that is executed before a user is created. I used the Adaxes tutorial “Run PowerShell Script after Creating a User” for reference. The script executes when using the “Run…” button in the script window. “Run as” is set to Adaxes service account. When I try to create a user through the “Administrator” web interface, the business rule is recognized and tries to execute. However, I get an “Access Denied” error when the script tries to execute.

Are there permissions I’m forgetting somewhere? Thanks in advance for the assistance.

by (320 points)
by (307k points)
0

Hello,

For troubleshooting purposes, please, post here or send us (support@adaxes.com) the following:

  • A screenshot of the business rule you have.
  • A screenshot of the error message you are facing.
  • The script you are using in TXT format.

Any additional details will be much appreciated.

by (320 points)
0

Hello,

Thank you for your response. I have provided additional details through support@adaxes.com.

1 Answer

by (307k points)
0 votes

Hello,

Thank you for the provided details. The issue occurs because the account used to register your domain in Adaxes does not have required permissions to create new users. By permissions here we mean native Active Directory permissions, not those granted by Adaxes security roles. For information on how to check/change the account, have a look at the following help article: https://www.adaxes.com/help/ChangeManagedDomainServiceAccount.

Related questions

Access Denied on Business Rule

Fresh install of Adaxes, version 2023.2 Testing out creating a user in Active Directory and I found a simple script to check if the username and email is unique. ... staging OU however this script isnt writing to the domain so delegation shouldn't be required

asked Jun 11 by NAP-LN (20 points)
0 votes
0 answers
How to pass Adaxes variables (%username% as an example) into a powershell script for a business rule?

In a business rule, I'd like to pass Adaxes variables into a powershell script that I'll run. For example, pass %username% into the script so it can be used inside the script.

asked Sep 5, 2024 by P-Sysadmin (20 points)
0 votes
1 answer
Business Rule - After adding members to group - Powershell script to user not executed

Hi team, I need to update users extensionAttribute6 after adding or removing them from a specific group. This is my setup: Group is updated based on rule set within Adaxes ... would like to update users after they were added or removed from this group. Thanks!

asked Sep 25, 2023 by wintec01 (2.4k points)
0 votes
1 answer
Get number of affected objects to use in Business Rule Powershell script

Let's say I have a Business Rule that is fired prior to adding members to a group. Is it possible to get the number of objects being added to that group as ... that tells me that 6 objects will be added or is each added user treated completely independently?

asked Apr 20, 2022 by ngb (360 points)
0 votes
1 answer
'Access denied' running a powershell custom command

I've modified the script here https://www.adaxes.com/script-repository/import-users-to-be-deprovisioned-s3.htm to do bulk deprovisioning of accounts via a .csv file. It ... share and folder. Why is this throwing this error? They path works in file explorer.

asked Mar 26, 2021 by johnsonua (390 points)
0 votes
1 answer