Not logged in - Login
< back

Active Directory Account Management Using PowerShell

Contents [hide]

The Active Directory Account Managment component can make use of PowerShell to carry out task on initial user/group provisioning and on subsequent changes to Users or Groups

Active Directory Account Management PowerShell Location

By default the service is installed in the following locaiton:of “C:\Program Files (x86)\Capita\ADAM\Provisioning\ActiveDirectory.Provisioning” Post installation the location used for running Group and User associated PowerShells can amended by editing the file called “ActiveDirectory.Core.config” You need to alter the following values 

<add key="UserScriptsFolder" value=".\Scripts\Users" />

equates to C:\Program Files (x86)\Capita\ADAM\Provisioning\ActiveDirectory.Provisioning\Scripts\Users and 

<add key="GroupScriptsFolder" value=".\Scripts\Groups" />

equates to C:\Program Files (x86)\Capita\ADAM\Provisioning\ActiveDirectory.Provisioning\Scripts\Groups

Any PowerShell scripts (*.ps1) inside the target folder(s) will be will be executed in ASCII order when a user is modified (Content of file “00 Read Me.txt” installed into each folder)

Running scripts in a specified order

When a changed user is processed any PowerShell scripts (*.ps1) located in the folder specified by UserScriptsFolder are run in alphabetical order. You are able to run additional scripts by referencing them from within a script. An example script is included below.

Example PowerShell Script 1.

# Declare parameter(s)
param([string]$User)

Write-Output "PowerShell Script #1 for User $($User)"

$vars = Get-ChildItem env:ADAM-*
foreach($var in $vars)
{
    Write-Output "   $($var.Name) = $($var.Value)"
}

Using Active Directory Account Mangement variables within your scripts.

Like any PowerShell, you can call AD variable in the normal way. In additon to this you are able to call ADAM variable to be used in your scripts