0 votes

I have read the previous posts regarding useraccountcontrol but they dont seem to apply to my situation. Here is what I am looking for

Report - a scheduled report that finds useraccountcontrol set to 544 - I can't seem to find that attribute when browsing the attributes in Adaxes.

A task that will change a useraccountcontrol entry value of 544 to 512 - but again I cannot seem to see that attribute.

Any ideas on this?

by (280 points)

1 Answer

0 votes
by (216k points)

Hello,

I can't seem to find that attribute when browsing the attributes in Adaxes.

The Display Name for the attribute in Adaxes is Account Options. The userAccountControl property appears under this name everywhere in Adaxes.

Report - a scheduled report that finds useraccountcontrol set to 54

Currently, you cannot create a custom report in Adaxes or generate reports on a scheduled basis: both the features are in our TODO list. However, there is a workaround. For example, you can create a Scheduled Task that would use a PowerShell script to find all users who have the Account Options property set to 544 and generate a report on such users. Then, it would send the report by e-mail.

For information on how to search user accounts in scripts, see Searching User Accounts.
For information on how to send e-mail messages from scripts, see Sending Emails and SMS.
If you need assistance with the actual script, we can help you.

A task that will change a useraccountcontrol entry value of 544 to 512 - but again I cannot seem to see that attribute.

If we got you right, you want to create a Scheduled Task that will change the value of the Account Options property to 512 for those users who have it set to 544. If we are right, to create such a Scheduled Task:

  1. Create a new Scheduled Task.
  2. On the 3rd step of the Create Scheduled Task wizard, select the User object type.
  3. On the 4th step, add the Update the User action and click Add.
  4. In the Add Property Modification dialog, expand the Property to modify drop-down list and select the Show all properties option.
  5. Select the Account Options property.
  6. Click the button embedded in the New value field.
  7. Check the Normal account flag.
  8. Click OK 3 times. This will set the Account Options property to 512.
  9. Now, you have to add a condition to change Account options only when the Account Options property is set to 544. Double-click Always.
  10. Select the If <property> <relation> <value> condition.
  11. Expand the <property> drop-down list and select the Show all properties option.
  12. Select the Account Options property.
  13. Select If Account Options equals and click the embedded Edit button.
  14. Check the Normal account and No password is required flags and click OK two times. This will check whether the Account Options property of a user account equals to 544.
  15. Finish creation of the Scheduled Task.
0

Thank-you this solved my issue. I could not find the correct set of attributes in Adaxes and your screen prints pointed me in the right direction.

I have been using Adaxes for about 4 months and it is a TERRIFIC product.

Related questions

0 votes
1 answer

Error occurs when trying to use SSPR from self-service web interface and from the Windows login screen. Has anyone seen this before? I haven't been able to ... configured exactly how it is laid out here: https://adaxes.com/help/ConfigurePasswordSelfService/

asked Apr 19, 2023 by dhodgin (40 points)
0 votes
0 answers

Hello The "Send mail"-Function is not working if i use the %mail%-Parameter. If i want to send an information like "Your password will expire in 7 Days" via mail but it ... if i put a specified recipient in the "To"-Field the recipient will get the message.

asked 3 days ago by Baul (110 points)
0 votes
1 answer

What is the difference between "Disable Account", "Lock Account", "Account Expired" Please explain the differences and when to use each. Thank you

asked Apr 26 by hhsmith (60 points)
0 votes
1 answer

I am unsure how to deal with this because of how Adaxes treats one identity account as two different objects, an AD and AzureAD user account, and both has different last logon values. What is a good way to combine the data?

asked Apr 22 by Daniel (100 points)
0 votes
1 answer

I'd like to limit users from being able to login to the Web interface. In other words, if a user opens multiple browsers or tabs, can I prevent them from being able to login to each tab/browser and starting multiple sessions? Thanks!

asked Apr 10 by cewilson (140 points)
3,358 questions
3,057 answers
7,804 comments
545,176 users