none
userAccountControl and EmployeeStatus RRS feed

  • Question

  • Hello All,

         I'm currently following Jorge's guide on using the "Employee Status" attribute to control userAccountControl. In my Lab environment I am able to control the account status. However I am trying to reverse the process and import all existing useraccountcontrol and if the value equals any of these values 512,544,66048 set "Employee Status" to "Enabled" in FIM portal if not set "Employee Status" to "Disabled".

    Can somebody give me the needed function or custom expression necessary for this to work.

    Jorge's Guide can be found at http://jorgequestforknowledge.wordpress.com/2010/07/29/managing-the-useraccountcontrol-attribute-in-ad-by-fim/

    Monday, April 1, 2013 4:38 AM

Answers

  • Hello,

    You can use this following custom expression in a SR (import flow):

    IIF(Eq(BitOr(userAccountControl,2),userAccountControl),"Disabled","Enabled")

    Regards,

    Sylvain

    • Marked as answer by epatri Thursday, April 4, 2013 6:05 AM
    Tuesday, April 2, 2013 7:40 AM

All replies

  • Bump anybody???
    Tuesday, April 2, 2013 12:09 AM
  • Hi,

    Take a look here: http://social.technet.microsoft.com/wiki/contents/articles/how-to-enable-or-disable-accounts-in-active-directory-domain-service-using-fim.aspx

    else, something like this might help?

    IIF(Eq(userAccountControl,66080),"active",IIF(Eq(userAccountControl,512),"active",IIF(Eq(userAccountControl,544),"active","disabled")))

    cheers.

    Tuesday, April 2, 2013 1:22 AM
  • Hello,

    You can use this following custom expression in a SR (import flow):

    IIF(Eq(BitOr(userAccountControl,2),userAccountControl),"Disabled","Enabled")

    Regards,

    Sylvain

    • Marked as answer by epatri Thursday, April 4, 2013 6:05 AM
    Tuesday, April 2, 2013 7:40 AM