none
I would like to set Accountstate for Computers Active or Disabled based on AD info. RRS feed

  • Question

  • This flow found below doesn't work.  It still resolves to false and therefore shows Active when it's actually disabled and the decimal is 4098...which is disabled.

    Active would be 4096.

    I've copied this from our working user flow, but changed the bit amounts to reflect 4096 instead of 512.

    Clearly I'm doing something wrong, but it doesn't work.  It also doesn't work if I switch around the 2 and 10.

    Someone help please!

    Friday, February 8, 2013 4:01 PM

Answers

  • I'm sorry.  Thank you for the answer, but it doesn't help.  I am not trying to set the flag on the computer, just read it incoming only.

    Nothing I've tried works.

    IIF userAccountControl = 4098, then true is Disabled, false is Active ---> AccountState (FIM portal attribute)

    No matter what language or customexpression I try in the portal declarative rules, it shows Active.

    Can anyone simplify this for me?


    Saw that my original was wrong....tried this one to no avail:

    That one above finally did it.  I thought I had originally tried that one, but I guess not.  So...for those ever wanting an accountstate of computers in the domain....THATS IT! Yay....
    • Marked as answer by gdtilghman Friday, February 8, 2013 9:29 PM
    • Edited by gdtilghman Friday, February 8, 2013 9:30 PM
    Friday, February 8, 2013 9:02 PM

All replies

  • see if the following helps:
     
     

    Cheers,


    (HOPEFULLY THIS INFORMATION HELPS YOU!)
    Jorge de Almeida Pinto | MVP Identity & Access - Directory Services

    -------------------------------------------------------------------------------------------------------
    * This posting is provided "AS IS" with no warranties and confers no rights!
    * Always evaluate/test yourself before using/implementing this!
    * DISCLAIMER:
    http://jorgequestforknowledge.wordpress.com/disclaimer/
    -------------------------------------------------------------------------------------------------------
    ################# Jorge's Quest For Knowledge ###############
    ###### BLOG URL:
    http://JorgeQuestForKnowledge.wordpress.com/ #####
    #### RSS Feed URL:
    http://jorgequestforknowledge.wordpress.com/feed/ ####
    -------------------------------------------------------------------------------------------------------
    <>

    "gdtilghman" wrote in message news:a5744283-6d73-4452-80dc-b27fd538e721@communitybridge.codeplex.com...

    This flow found below doesn't work.  It still resolves to false and therefore shows Active when it's actually disabled and the decimal is 4098...which is disabled.

    Active would be 4096.

    I've copied this from our working user flow, but changed the bit amounts to reflect 4096 instead of 512.

    Clearly I'm doing something wrong, but it doesn't work.  It also doesn't work if I switch around the 2 and 10.

    Someone help please!


    Jorge de Almeida Pinto [MVP-DS] | Principal Consultant | BLOG: http://jorgequestforknowledge.wordpress.com/
    Friday, February 8, 2013 7:34 PM
  • I'm sorry.  Thank you for the answer, but it doesn't help.  I am not trying to set the flag on the computer, just read it incoming only.

    Nothing I've tried works.

    IIF userAccountControl = 4098, then true is Disabled, false is Active ---> AccountState (FIM portal attribute)

    No matter what language or customexpression I try in the portal declarative rules, it shows Active.

    Can anyone simplify this for me?


    Saw that my original was wrong....tried this one to no avail:

    That one above finally did it.  I thought I had originally tried that one, but I guess not.  So...for those ever wanting an accountstate of computers in the domain....THATS IT! Yay....
    • Marked as answer by gdtilghman Friday, February 8, 2013 9:29 PM
    • Edited by gdtilghman Friday, February 8, 2013 9:30 PM
    Friday, February 8, 2013 9:02 PM