Script Center

From ActiveRoles

All scripts where migrated from the Script Center on Community Library. The library would be shut down shortly.

Contents 1 Script policies 1.1 Best Practices 1.2 User management 1.2.1 Create 1.2.2 Copy 1.2.3 Move 1.2.4 Provision 1.2.5 Disable, delete, deprovision 1.2.6 Other 1.3 Group management 1.4 Computer management 1.5 Exchange management 1.6 Permission management 1.7 Approval 2 Standalone scripts 3 PowerShell samples 3.1 PowerShell script policies 3.2 PS snapin 4 C# samples 4.1 Approval 5 JavaScript samples

Script policies

Best Practices

• ARS Script Policy Best Practices

User management

Create

• Create/Delete local user accounts, basing upon creation/deletion of user accounts in Active Directory
• User logon name generation without national characters

Copy

• Prevent copying an attribute on user copy
• Copy additional attributes on user copy
• Select Exchange mailbox store on user copy

Move

• How to enable cross-domain moving of user accounts
• Re-locates users according to a value set in a virtual attribute
• Move a user to some OU upon creation
• Validate moving operations

Provision

• User Provisioning - Home Drive Location and Profile based on UserID
• Populate user attributes based on another attribute - e.g. 'Company'
• How to de-enforce a mailbox creation on the New User Wizard
• Stamping manager DN by given manager Id
• Custom script-based User Logon Name Generation policy
• Custom script-based mailbox store selection policy
• Custom script-based PVG-policy with possible values list
• Custom script-based PVG-policy with generation rule
• Simplified version of the script-based PVG-policy with a possible values list
• Populate a PVG policy with a possible values list from external source
• Script-based "Last N characters of X attribute"-rule as part of User Logon Name Generation policy rules

Disable, delete, deprovision

• Restrict who can Disable users while allowing Enable
• Delete Expired Users and Home Directory
• Programmatically deprovision a user
• Notify manager when user object is deprovisioned
• Get user account properties after it had been deleted

Other

• Function to get a DN of a user object using samAccountName
• Script Policy to set account expiration for every created user account
• Set correct country code for user
• Manage country codes, names and abbreviations
• Standalone script to set logon hours of a user account
• Replace Umlaute (öäü) to normal characters
• a Managed Unit with users which have not logged on for last 90 days
• Force Mailbox-Creation Policy upon User creation outside from ARS
• How to enforce the use of the "Generate Password" function
• Workaround: Establish user (or group) email address in pure Exchange 2007 organization
• How to prohibit specifying a user password that never expires
• Review for user personal data
• Tree of trust - allow objects to be managed only by their direct or indirect managers
• How to prevent ARS interaction with file servers on User Home Folder Provision
• Detailed debug information on the script policy request object

Group management

• Allow only computers be members of a group
• Convert a regular group to dynamic group
• Convert a normal group to dynamic group
• Script Policy to check group members when they are added to or removed form a group
• Adjust the case of usernames to title case (first letter of each part of the name)
• Set Group Ownership upon any Modification
• Advanced group creation/provision
• Notify member upon expiration of his membership in group
• How to convert Query-based Distribution Group to ARS Dynamic Group

Computer management

• Allow only computers be members of a group
• Move computer account to appropriate OU on joing computer to domain

Exchange management

• Change default SMTP address
• How to remove X400 address
• Custom script-based mailbox store selection policy
• Execute an Exchange cmdlet in script policy
• How to de-enforce a mailbox creation on the New User Wizard
• Force Mailbox-Creation Policy upon User creation outside from ARS
• Workaround: Establish user (or group) email address in pure Exchange 2007 organization
• Select Exchange mailbox store on user copy

Permission management

• Restrict who can Disable users while allowing Enable
• Track user who performs a deprovision
• Prohibite an AD native security editing
• Prohibite a permission propagation to AD

Approval

• VBScript: Approval-aware modify operation

Standalone scripts

• LargeInteger date format
  • Function that converts regular date into integer8 format
  • Read large integer date attributes and display them in date and time readable format
• Populate values from a SQL database to a AD Attribute
• Get effective policy info list
• Bulk policy incompliance fixing
• Policy incompliance reporting & fixing for specified policy
• How to find a request source in script policy
• How to send emails based on scripts policy parameters and VA
• Advanced shared folder creation
• Standalone script that requests built-in password generation policy
• Create Group Membership AutoProvisioning policy
• Sync permissions to AD from Managed Units
• XML Parameterisation
  • Read XML Node text or attribute value
  • Read XML Node with Children into DictionaryObject

PowerShell samples

PowerShell script policies

PowerShell script host would be introduced with ActiveRoles Server 6.5. To run PowerShell code in your script policy with the previous versions of ARS you can use the sample below

• Execute an Exchange cmdlet in script policy

PS snapin

• Get AD Management snapin version (with build number)
• How to schedule the AD Management shell

C# samples

Approval

• C#: Approval-aware modify operation

JavaScript samples

• Safe arrays
• JavaScript library for ActiveRoles Server
• Unlock a user account