Autocomplete "Authorised to Add Computer to Domain"

Question

When creating a new computer record you have the opportunity to choose a user/group whom can add the physical computer.

Looking in the Adaxes log I note that this is added by specifying the SID value of the selected entry. However when checking the computer record itself I see no corresponding attribute that holds this value.

Is there any way of automatically inserting the SID using a Business Rule/Property Pattern so that a pre-defined group is always set without having to select it every-time? I also tried looking for a Powershell command that did so but couldn't find one?

Thanks

Comments

I second this. Would love to be able to auto fill this field with the initiator or a group.

Answer 1

Hello,

Currently there is no built-in functionality for that, but you can accomplish your task with a PowerShell script. To do this, you need to create a Business Rule that will be launched after creating a computer account and that will set the group who can join a computer to a domain with the help of a Run a program or PowerShell script action and a script. To create such a Business Rule:

1. Create a new Business Rule.

2. On the 2nd step of the Create Business Rule wizard, select Computer and After Creating a Computer.
   

3. On the 3rd step, add the Run a program or PowerShell script action and paste the following script in the Script field:
   

    $groupName = "My Group" # TODO: modify me
   
    Import-Module Adaxes
    $group = Get-AdmGroup $groupName -Server $Context.GetObjectDomain("%distinguishedName%")
    if ($group -eq $NULL)
    {
        $Context.LogMessage("Group $groupName was not found!", "Error")
        return
    }
    $Context.TargetObject.Put("adm-UserOrGroupThatCanJoinComputerToDomain", $group.SID.ToString())
    $Context.TargetObject.SetInfo()
   

4. In the script, $groupName specifies the name of the group, members of which will be able to join the computer to a domain. Specify the name of the necessary group.

5. Enter a short description for the script and click OK.

6. Finish creation of the Business Rule.

That should do the job for now. Starting from our next version (Adaxes 2013.1) we'll add the functionality to set the user or group who can join a computer to a domain with a Business Rule action, and you won't need the script to do this.