Add User to Groups in Subdomains

Question

Dear Support,

I'm using this Script for adding User to Groups.

Import-Module Adaxes
$User = "%distinguishedName%"
$group = get-AdmGroup "KendoxUser_%adm-CustomAttributeText17%" -Properties Members

if ($group.Members -notcontains $User)
{ 
   $group | Add-AdmGroupMember -Members $User
   $Context.LogMessage("Benutzer zur Gruppe $group hinzugefügt", "Information")
   return
}

It works fine, but when the Grouplocation is in a Subdomain it doesn't work.
Do you have any idea why?

Answer 1

Hello,

It doesn't work for a sub-domain because by default, Adaxes cmdlets, such as Get-AdmGroup or Add-AdmGroupMember, perform operations only in the current domain. To be able to perform operations with the help of the cmdlets in another domain, you need to specify the Active Directory Domain Services instance to connect to via the -Server parameter and the Adaxes service that will be used for the operation via the -AdaxesService parameter, for example:

$group = get-AdmGroup "KendoxUser_%adm-CustomAttributeText17%" -Properties Members -AdaxesService localhost -Server subdomain.example.com

We can modify the script to match your requirements, but for this purpose we need to know how to get the FQDN of the subdomain. Can it be hard-coded in the script or maybe derived from some properties of the user?

Comments

Hello,

Here's a modified version of the script that meets your requirements:

Import-Module Adaxes
$User = "%distinguishedName%"

$domainName = $Context.GetObjectDomain("%distinguishedName%")

$group = get-AdmGroup "KendoxUser_%adm-CustomAttributeText17%" -Properties Members -AdaxesService localhost -Server $domainName

if ($group.Members -notcontains $User)
{
   $group | Add-AdmGroupMember -Members $User -AdaxesService localhost -Server $domainName
   $Context.LogMessage("Benutzer zur Gruppe $group hinzugefügt", "Information")
}