Add domain user to local admin group

Question

Hello,

I would like to create a custom command "Add domain user to local admin group".
The powershell command to execute this is quite easy.
Where I'm struggling is another point.
The initiator has to select first the user name from AD and than the computer name from AD.
This would garantee the user and the computer exist.
Is it possible to create such a task without a custom form?

Many thanks.

Answer 1

Hello Horst,

There is no possibility to achieve what you need without using a custom form in a Home Page Action.

As a solution you can use a Modify User Home Page Action with a Custom Form and a Business Rule triggering After Updating a User. In the Custom form of the action, there will be only one DN syntax attribute (e.g. Assistant) used to select the computer. The Business Rule will trigger after updating the attribute and execute a PowerShell script that will add the modified user to the local admin group. If this solution meets your requirements, we will provide you with detailed instructions.

Comments

Hi,

after some time I implemented your solution and it works very well.
There is only one point: in the same BR where the powershell script runs I added a command to clear the assistant field and now the process runs into a loop "after updating a user".
How can I prevent this?

Thanks.

---

Hello Horst,

You need to add the If Assistant is not empty condition to your Business Rule.

---

Hello,

to do this in the recommended way will produce a lot of problems :( :(

The BR "after updating a user" is triggered from "create a user" and from the action "add user to local admin" and from other different actions.

That means the BR "after updating a user" is triggered from a handful actions and it's not possible to create conditions for every case.

My recommendation for the next Adaxes upgrade: add the possiblity to create a condition like "if action = actionname".

Regards.

---

Hello Horst,

Thank you for the suggestion, we will consider it.