Create Temporary AD account for network access

Question

Our network team is working on a system to allow temporary AD user accounts that will be allowed to obtain access to network services. (They are doing this by allowing access to a group called CO_Wireless_LOC_Event_Users).

The process is as follows:

1. Colleagues submits a ticket to our Help Desk with event name and start/conclusion date.
2. The Help Desk login to Adaxes, click on "Create LOC Guest Wifi"
3. Adaxes prompts Help Desk for: a. Colleague name/email (So it knows who to send the username and password to) b. Event name (Username of AD account, avoid spaces) c. Event expiration date (When the AD account will be deleted/disabled)
4. Adaxes creates the user account in a OU called "LOCGuestWifi" and makes that user a member of the "CO_Wireless_LOC_Event_Users" AD group which wll also have an expiration date for the account and and a randomly generated password.
5. Adaxes then sends the colleague the username/password and event details in an email.
6. Because the AD User account has an expiration date, it will automatically disable at conclusion of event.

Comments

Hello Ray,

For us to provide you with a solution, please, specify the version of Adaxes you are using. For information on how to check it, have a look at the following help article: https://www.adaxes.com/help/CheckServiceVersion.

---

Product version: 3.14.19312.0

Answer 1

Hello Ray,

Thank you for specifying. To configure the desired workflow:

1. Create a Web interface action of Create User type. The action should be configured specifically for the LOCGuestWifi OU. On the form the action should only have the required properties including an Adaxes custom date attribute (e.g. CustomAttributeDate1) to specify when the user must be disabled. For information on how to manage Web interface actions, have a look at the following tutorial: https://www.adaxes.com/tutorials_WebInterfaceCustomization_ConfigureActionsPane.htm.
2. Create a business rule triggering After creating a user. The rule will add accounts created in the LOCGuestWifi OU to the COWirelessLOCEventUsers group.
3. Create a scheduled task that will be executed daily and disable users in the LOCGuestWifi OU when the time comes.