Active Directory Command

Use this command to manage your Active Directory and create, modify, and delete users in the system with centralized control.

Overview

An Active Directory is a directory service that is provided by Microsoft. This facility assists the Administrator in managing users across a
group or wider organization.

Tip: All fields for the Active Directory command support the use of variables.

Automation Anywhere Enterprise uses LDAP (Lightweight Directory Access Protocol) to read from and edit users in the Active Dir-
ectory. The Server name and Domain name are combined to create an LDAP path, which is used to connect to the Active Directory.

Establishing a Connection with Active Directory

To manage users in the Active Directory, ensure that a connection is established between the Administrator and the Active Directory
server. Users who are logged into the Active Directory should have privileges for connecting to the Active Directory server and viewing
the Server name, Domain name, user name and password details.

Sub-Commands

The Active Directory command provides the following sub-commands:

l Create User
l Modify User
l Create Group
l Modify Group
l Create Object
l Modify Object
l Search
l Get Property

Using the Sub-Commands

Follow these steps to insert Active Directory commands.

l Create User Command:

This command creates a new user in the location specified in the Active Directory connection string. Follow these steps to insert
the Active Directory - Create User command.

1. Double-click or drag the Active Directory - Create User command to the Task Actions List pane. The Active Directory main
window is displayed.
2. To establish a connection with the Active Directory, provide the Login User name and Login Password or assign a variable
by pressing the function key 'F2'.

Tip: You can opt to input 'Credential Variables'* by selecting the required credential
keys from the list of 'Credential Variables' for enhanced security. Learn More
*Applicable from version 10.3

Other User
Resources:
 3. Specify the Parent path in the Enter LDAP Path field.

3. If you do not know the Parent path, use the browse button to locate it.

Other User
Resources:
 4. The Active Directory Object Browser window is displayed.

<update>

5. Enter the details for a new user. Check the password option check boxes as needed.
6. Click Save to complete the process.
l Modify User Command:

This command enables you to modify or rename users in the Active Directory. Follow these steps to insert the Active Directory -
Modify User command.

1. Double-click or drag the Active Directory - Modify User command to the Task Actions List pane. The Active Directory main
window is displayed.
2. Select one of the options in the 'Select User Action' drop-down menu.

A. Rename User: Use the check boxes in the 'Enter Modify User Details to rename the user logon name and/or the
user account name.
B. Enable User Account: Enables a user account.

Other User
Resources:
 C. Disable User Account: Disables a user account. Select the User Name or Logon Name to disable either one, in the
'Enter Modify User Details' section.

D. Delete User: Deletes the user from the Active Directory. Select the User Name or Logon Name to delete either one,
in the 'Enter Modify User Details' section.

E. Update User Details: Use this option to update the user's details.
F. Update Account Options: Use this option to set account attributes for the user. Select from four attributes: User must
change password at next login, Is Active, User cannot change password, and Password never expires.
G. Change Password: Use this option to change a user's password.
H. Set Property: Use this option to assign a value to a user property , view the current details and update them.

Tip: Alternately, if you are unsure of the 'User Name' that has to be modified, click the
browse button in 'Enter LDAP Path' section. You will be guided to the 'Active Directory Object
Browser'; select a user from the list to perform any of the above 'User Actions'.

Other User
Resources:
 l Create Group Command:

This command enables you to create a group in the Active Directory. Follow these steps to insert the Active Directory - Create
Group command.

1. Double-click or drag the Active Directory - Create Group command to the Task Actions List pane. The Active Directory main
window is displayed.
2. Select options for GroupName, Description, Group Scope and Group Type.

Other User
Resources:
 Modify Group Command:

This command enables you to modify a group in the Active Directory. Follow these steps to insert the Active Directory - Modify Group
command.

1. Double-click or drag the Active Directory - Modify Group command to the Task Actions List pane. The Active Directory main win-
dow is displayed.
2. Select options for: Rename Group, Delete Group, Add Users To Group, Remove Users From Group and Set Property.
A. Rename Group: Use this option to rename an existing group.
B. Delete Group: Use this option to delete an existing group.
C. Add Users to Group: Use this option to add additional users to a group. A user list is displayed. Use the Add, Remove and Edit but-
tons and click on Add Users to the group.

Other User
Resources:
 a. Adding/Editing/Removing multiple users in a Group: You can select a user or enter multiple users to add/edit/remove in/-
from a group from within the group list of the 'Active Directory Object Browser' Window.

Input the user names in the 'Enter user(s)' text box. If assigned, you can also insert variables.

Note: Multiple user names/variables must be separated with a ';' (semi-colon).

Other User
Resources:
 b. Adding Logon Names as User(s): If your Active Directory comprises users with same names, you can add 'Logon'
names instead as 'User(s)'. To do so, select the option 'The above names are Logon Names' in the 'Active Directory
Object Browser' window. Optionally, insert variable(s), if assigned.

c. Editing Logon/User Names: You can edit your Logon Name, User Name and even the LDAP string, if input incor-
rectly.Select the User, Click 'Edit' and you shall be guided to the 'Active Directory Object Browser' window, wherein you
will be able to input the necessary changes. Click 'Save' once done.

Note: When editing a User Name, you can also select the 'Logon Name' option.

D. Remove Users from Group: Use this option to remove users from a group. A user list is displayed. Use the Add and Remove but-
tons and click on Remove Users.
E. Set Property:Use this option to assign a value to a group property.

Other User
Resources:
 l Create Object Command:

This command enables you to create a new object, either for Computer or for Organizational Unit, in the Active Directory. Follow
these steps to insert the Active Directory - Create Object command.

1. Double-click or drag the Active Directory - Create Object command to the Task Actions List pane. The Active Directory main
window is displayed.
2. Select the option for creating either a new Organizational Unit or a new Computer by using the radio button.

l Modify Object Command:

This command enables you to modify an object in the Active Directory. Follow these steps to insert the Active Directory -
Modify Object command.

1. Double-click or drag the Active Directory - Modify Object command to the Task Actions List pane. The Active Dir-
ectory main window is displayed.
2. Select options for: Rename Object, Delete Object, Move Object, and Set Property.
A. Rename Object: Use this option to rename an existing computer or organizational unit.
B. Delete Object: Use this option to delete an existing computer or organizational unit.
C. Move Object: Use this option to change the location of an existing computer or organizational unit.
D. Set Property: Use this option to assign a value to an object property.

Other User
Resources:
 Search Command:

This command enables you to search the Active Directory for users of a group or run a query on the Active Directory. Follow
these steps to insert the Active Directory - Search command.

1. Double-click or drag the Active Directory - Search command to the Task Actions List pane. The Active Directory main win-
dow is displayed.
2. Select one of the following options from the drop-down window:
A. Get All Users of a group: Use this option to find all users that are members of a group, and stores them in a list variable.
Depending on the return type of the list variable, it contains the user names or the LDAP paths for the members.
B. Run Query: Use this option to specify an Active Directory query and run it. The query results are stored in a list variable,
either for object names or LDAP paths, depending on the option selected.

Other User
Resources:
 Tip: For Active Directory (LDAP) queries, you may refer this link.

l Get Property Command:

This command enables you to retrieve a specific property value for an object (user name, group name, computer, or organ-
izational unit) to a variable. Follow these steps to insert the Active Directory - Get Property command.

1. Double-click or drag the Active Directory - Get Property command to the Task Actions List pane. The Active Directory main
window is displayed.
2. Select the object type: user, group, computer, or organizational unit.

Other User
Resources:
 Also See...
l Active Directory Command - Examples
l Printer Settings Command
l Services Command
l SNMP Command

Other User
Resources: