Help with Business Rule logic

Question

Hi - I'm trying to validate that the email address entered is distinct. The logic below is not working.

When we had Exchange, this was automatic. We no longer have Exchange, so email is just the "mail" attribute in Active Directory. I simply want to prevent a user from entering an already present address.

Similar logic to this works just fine with other attributes (employeeid for example).

Import-Module Adaxes  
if ($Context.IsPropertyModified("mail"))  
{  
 # Get the value specified by the user  
 $value = $Context.GetModifiedPropertyValue("mail");  
 # Validate mail  

 # Ensure that the mail is unique  
 if ((Get-AdmUser -Filter 'mail -eq $value') -ne $NULL)  
 {  
 $Context.Cancel("A user with the specified mail address already exists!");  
 return $false;  
 }  
}

Comments

Hello,

The script is OK. Can you post here or send us a screenshot of the Business Rule that launches the script? Also, when is the Business Rule triggered, before or after creating/updating a user?

---

You can see that the Business Rule fires, but when tested against a known pre-existing address, it does not flag it as a duplicate. It seems to pass it anyways.

---

How many domains do you have registered in Adaxes? Is Adaxes installed on a computer in the same domain as the user that you are testing with?

Answer 1

Just one. I found my mistake....

I needed to specify "Before Creating a User" on the Business Rule. Thanks for your patience! Once I did this, it works like a champ.

Comments

Similar question, but targeting groups this time. I'm triggering this before group creation, but it does not seem to catch the duplicates:

Import-Module Adaxes  
if ($Context.IsPropertyModified("Email"))  
{  
 # Get the value specified by the user  
 $value = $Context.GetModifiedPropertyValue("Email");  
 # Validate mail  

 # Ensure that the mail is unique  
 if ((Get-AdmGroup -Filter 'Email -eq $value') -ne $NULL)  
 {  
 $Context.Cancel("A group with the specified Email address already exists!");  
 return $false;  
 }  
}

---

Nevermind - you have to be careful to select the actual attribute name. "mail", not "email".

Thanks!