How to get Advanced AD Object Properties from Powershell

Question

Hi

I've added values to two attributes of an Oraganization Unit:
adm-CustomAttributeText1
adm-CustomAttributeText2

I'm trying to extract these properties with a powershell script (this is to update the users email address based on a parent OU i a managed domain):

Import-Module Adaxes

$username = "user@domain.com"
$password = "password"
$domain = "domain.com"
$passwordSecure = ConvertTo-SecureString $password -AsPlainText -Force
$credential = New-Object System.Management.Automation.PSCredential ($username, $passwordSecure)
$User="CN=%fullname%,OU=Users,OU=%extensionAttribute1%,DC=domain,DC=com"
$email=Get-AdmObject -Credential $credential -Server $domain -Identity 'OU=%extensionAttribute1%,DC=domain,DC=com' | FL adm-CustomAttributeText1

Set-AdmUser -Identity $User -Credential $credential -EmailAddress %firstname%.%lastname%@$email -Server $domain

But this does not provide the value set in adm-CustomAttributeText1.

Any ideas?

Comments

Hello,

Can you describe in more detail what should the script do?

Also, are you trying to launch the script from Adaxes (with a Business Rule, Custom Command or Scheduled Task) or from the PowerShell console?

---

We are testing to see if Adaxes can be used in a multi-tennant solution. Therefore we want the user creation part to be "idiot-proof".

The script is put in a Business rule that launches after the user has been created. The script should then read the property adm-customAttributeText1 from the Customername ou (the user is created under Doman.local\Hosting\Customername\Users), and update the users email address to be %firstname%.%lastname%@ + the value of adm-customAttributeText1.

Answer 1

Here's the script that matches your requirements:

$ouDN = "OU=%extensionAttribute1%,DC=domain,DC=com" # TODO: modify me

# TODO: bind to the OU
try
{
    $ou = $Context.BindToObjectByDN($ouDN)
}
catch
{
    $Context.LogMessage("$ouDN was not found", "Error") # TODO: Modify me
    return
}

# Get domain part of the email from adm-CustomAttributeText1
try
{
    $emailDomainPart = $ou.Get("adm-CustomAttributeText1")
}
catch
{

    $Context.LogMessage("The CustomAttributeText1 property of %extensionAttribute1% is empty", "Error") # TODO: Modify me
    return
}

# Set Email property
$Context.TargetObject.Put("mail", "%firstname%.%lastname%@$emailDomainPart")
$Context.TargetObject.SetInfo()

By the way, thank you for your interest in our product. :)

Comments

Fantastic! Script worked perfectly :)