Adaxes

Get user with custom attribute of user DN

0 votes

Hi,

during account creation we store a user/requester DN in field adm-CustomAttributeObject2

If now this requester is disabled, I want to find all users in AD, who has this account set in their attribute.

I tried this already with the manager attribute and everything is working fine. However I am unable to create the same search with my adm-CustomAttributeObject2 field.

I found some articles and scripts, but nothing working as expected.

by (1.1k points)

1 Answer

0 votes
by (272k points)

Hello,

Unfortunately, there is no possibility to use Adaxes custom attributes in search criteria. You need to just find all the objects of the required type and then check the corresponding attribute value for each of the found results one by one. If you have issues writing the script yourself, please, describe what exactly it must do except for actually finding the users.

Related questions

0 votes
1 answer
Is there a way to get the name of the user who approved a request and supply that to a step inside of a custom command?

Is there a way to get the name of the user who approved a request and supply that to a step inside of a custom command? For example, HR submits a status change for an employee. ... and pass it as a param in a custom command that is called in one of the steps?

asked May 12, 2021 by davfount90 (20 points)
0 votes
1 answer
How can I update the target object user's Custom Attribute fields with this Manager user name?

Thanks for the info. I'm now grabbing the %adm-ManagerUserName% value, but need to remove the final 21 characters of it so it contains only their username and not our ... this in the PowerShell Script Editor for my business rule, I get the following error:

asked Mar 11, 2021 by mkvidera (60 points)
0 votes
1 answer
Group membership change update user attribute with name of group

Hello, is it possible to update a user attribute (extensionAttribute5) with the name of the group (Name), the user was just added to? Example: In Group A gets a new ... A should be written in the attribute extensionAttribute5 of User A. Can you please help me?

asked Jun 27, 2023 by lohnag (160 points)
0 votes
1 answer
Grant permission to edit a user when the initiatior DN is present in the SeeAlso attribute

We are using the SeeAlso attribute to store who is responsible for specific accounts. We do not wish to use the Manager field, because the Manager/Direct Report structure is ... to, for example, extende the expiration date of an account. Is that possible?

asked Jan 28, 2020 by manuel.galli (100 points)
0 votes
1 answer
Unable to get groupCategory attribute of AD group

Hi, I am making business rule which calls powershell script and inside the script I need to check whether account which is added to group is security group. I am using Get- ... , the same command return, that group type is security So what am I doing wrong?

asked Feb 20, 2020 by KIT (910 points)
3,351 questions
3,052 answers
7,791 comments
545,093 users