Unmanaged User Accounts Filter

Question

What is the format for entering 'type filter text' in the 'Unmanaged User Accounts' screen to exclude certain user OUs that we don't want to manage in Adaxes?

Thanks!

Answer 1

Hello,

Actually, the filter field on the Unmanaged User Accounts dialog can be used to search among user who are already added to Unmanaged Accounts.

In the UI, you can only add users one-by-one. To exclude whole OUs, you'll need to use a script. For an example of such a script, have a look at the following article in our SDK: Also, you can take a look at the sample scripts in Adaxes SDK: http://adaxes.com/sdk/?SampleScripts.Co ... ounts.html.

For more details, have a look at Restrict Users Based On OU.

Comments

Worked great! Thanks!

---

The script works, however, we continually get a message stating that we are over our license count and that Adaxes will stop functioning in 30 days if not resolved. When I open the properties and wait for the licensing to calculate, the results are that we are using 700+ less accounts that what we have purchased.

Is there a way to prevent the messages or to configure the system to calculate the unmanaged accounts before comparing the licenses vs the managed accounts?

---

Hello,

When I open the properties and wait for the licensing to calculate

Could you send a screenshot of this and also a screenshot of the warning message that you get to our support e-mail (support[at]adaxes.com)?

---

Email is on it's way.

Thanks.

---

Hello,

Sorry for misleading you. The script in the post we've cited in the initial reply contains an error. This script should remedy the issue:

$ouDNs = @("OU=Unmanaged Accounts 1,DC=domain,DC=com","OU=Unmanaged Accounts 2,DC=domain,DC=com") # TODO: modify me

function GetUserSids($ouDNs)
{
    $userSids = New-Object "System.Collections.Generic.HashSet[String]"

    foreach ($ouDN in $ouDNs)
    {
        $ou = $Context.BindToObjectByDN($ouDN)

        $userSearcher = New-Object "Softerra.Adaxes.Adsi.Search.DirectorySearcher" $NULL, $False
        $userSearcher.SearchParameters.BaseObjectPath = $ou.AdsPath
        $userSearcher.SearchParameters.PageSize = 500
        $userSearcher.SearchParameters.SearchScope = "ADS_SCOPE_SUBTREE"
        $userSearcher.SearchParameters.Filter = "(sAMAccountType=805306368)"
        $userSearcher.SearchParameters.ReferralChasing = "ADS_CHASE_REFERRALS_NEVER"
        $userSearcher.SetPropertiesToLoad(@("objectSid"))

        $searcherResult = $userSearcher.ExecuteSearch()
        $users = $searcherResult.FetchAll()
        $searcherResult.Dispose()

        foreach ($userID in $users)
        {
            $sidBytes = $userID.Properties["objectSid"].Value
            $sid = New-Object "Softerra.Adaxes.Adsi.Sid" @($sidBytes, 0)

            $userSids.Add($sid.ToString()) | Out-Null
        }
    }
    return ,$userSids
}

$userSids = GetUserSids $ouDNs

$configurationSetSettingsPath = $Context.GetWellKnownContainerPath("ConfigurationSetSettings")
$admConfigurationSetSettings = $Context.BindToObject($configurationSetSettingsPath)
$admConfigurationSetSettings.SetUnmanagedAccounts(@($userSids))