Rule description
This rule queries the specified Active Directory scope and for each returned object sets or clears the specified Active Directory attributes.
When to use this rule
Use this rule when you need:
-
To update an attribute for a set of Active Directory objects
- To clear one or several attributes at once for a set of Active Directory objects
-
To set attribute value during new Active Directory objects' creation. For details, see the KB20181029-1 article.
Rule Settings
Query Section
| Setting name | Description |
|---|---|
|
Limit scope to this domain or OU
|
This setting defines the search query scope. To improve query performance, limit the scope to specific OU. Important: To test rule configuration, limit the rule scope to an OU that contains test accounts or objects.
|
|
Query criteria |
Query criteria are sent with the query and may improve query performance. Tip: For different samples on the criteria builder, see KB20180410-1.
|
|
Object class filter |
To hide unwanted data, set the filtering conditions here. Tip: For optimal performance, use the Query criteria above to filter objects whenever possible.
|
| More options | |
|
Properties to display
|
To display additional properties for each object found by the rule, add those properties to the list.
|
| Sort by | Sort result objects list. |
Action Section
| Setting name | Description |
|---|---|
|
Attribute(s)
|
Select an attribute from the list. You can select multiple attributes. In this case, all these attributes would be cleared or set to the value specified in the Value setting. |
|
Value
|
Set attribute(s) value. Example: append some text to AD Users DisplayName attribute $($FoundObject.DisplayName + 'teststring') Note: You must add DisplayName attribute to Properties to display list.
|
Output Section
This section defines the output format of this rule.
To get more information about this section, please see the Output section article.
Enforce/Schedule section
This section defines the schedule for how often to run the rule.
To get more information about this section, please see the Enforce/Schedule section article.
Change History
| Version | Notes |
|---|---|
| 6.4.0 | The rule is introduced in the product. |
Comments
0 comments
Please sign in to leave a comment.