Remove/Modify Adaxes Attributes from Powershell

Question

I am using external powershell scripts where adaxes custom attributes are used as inputs. I want to clear/modify those attributes after my external ps1 script gets executed successfully. How do I implement the same inside my external scripts thru try{}catch{} error handling method?

Answer 1

Hello,

You can clear the attributes the same as you would do with any other attributes of AD objects. Note, however, that you are able to modify Adaxes custom attributes only when operations are performed via Adaxes service. That is, for this purpose, you'll need to use either cmdlets from Adaxes powerShell module or Adaxes ADSI API.

If you are using Adaxes PowerShell Module, you can use the Set-AdmUser cmdlet for this purpose and specify the -AdaxesService parameter when calling it, for example:

Set-AdmUser "CN=John Doe,CN=Users,DC=example,DC=com" -Clear "adm-CustomAttributeText1" -AdaxesService localhost

If you prefer using the ADSI API, you can do as follows:

$user = $admService.OpenObject("Adaxes://CN=John Doe,CN=Users,DC=example,DC=com", $NULL, $NULL, 0)

$user.Put("adm-CustomAttributeText1", $NULL)
$user.SetInfo()

Comments

Nice.. easy one ;-)