Rule description
This rule queries Active Directory within the defined scope and for every user found in the source domain, creates a copy of this user in another domain.
When to use this rule
Use this rule when you need to copy user accounts from the source domain to another domain:
-
You can schedule this rule to run and check whether there are new user accounts created in the source domain to copy them to another domain
-
You can link this rule to the New User web action to create a user copy in another domain right after new user creation in the source domain. For details, please see KB20181029-1.
Rule settings
Query Settings
Note: There are core query settings, available for every rule that queries for Active Directory user accounts. For the information about core query settings, please refer to the following article:
Action Settings
| Setting name | Description |
|---|---|
|
Default OU for new object creation |
Select Organizational Unit (OU) in the target domain, where to create a copy of a user account.
|
|
Attributes to copy
|
List of attributes to copy from the user account in the source domain to the target domain. |
|
User Principal Name (UPN) prefix
|
Specify the format for User Principal Name prefix for a user's copy in the target domain. |
|
User Principal Name (UPN) suffix |
Select the User Principal Name suffix for a user's copy in the target domain. |
|
Default password
|
Select how a password is set for the user's copy in the target domain. Copy the created user password - select this option to copy the password value from a source account. This option can only be used when you link this rule to the New User action as a rule to run after the action. Generate Random Password - select this option to generate a new password. You can see the generated password if you add Password property to Other query settings > Properties to display. |
|
User must change password at next logon Password never expires User cannot change password Account enabled |
Select user settings for the user's copy in the target domain.
|
|
Match users using |
Select the anchor attribute to be used to find a matching user in the target OU. A copy of the user will be created if no matching user exists in the target OU.
|
Output Section
Administrators can get reports on existing user accounts in Active Directory.
To get more information about this section, please see the Output section article.
Enforce/Schedule section
This section defines the schedule for how often the mail message this is sent to the recipients defined by the query section of the rule.
To get more information about this section, please see the Enforce/Schedule section article.
Change History
| Version | Notes |
|---|---|
| 5.4.0 | The rule was introduced in the product. |
Comments
0 comments
Please sign in to leave a comment.