Change User's AD Location - Orchestration

[Rudi2]

Hi Guys

There's a lot of questions about this and not a good enough example.

All I want to do is to use the AD activities on the workflow to change a user to a different OU in AD.

Will Update ADObject activity work for this and what AD Field do I need to change or do I need to add a move-ADObject activity?

Regards

[suzipearson]

thanks so much for sharing Rudi   , really appreciate it.

Its for new user accounts , so I guess they wouldn't be in service now to get their DN

But will try the json decode you posted.

I am finding the whole thing so frustrating to say the least and the way we were sold it (it should work out of the box) and I keep getting asked by my managers when can we roll it out ! ...moan over for today

[jacobpeterson]

Hello,

I'm hoping you can help us with this. I feel like we are so close but keep getting an Access Denied issue. We are able to run all of the standard Orchestration Powershell script like Deactivating a user, Enabling, Update, etc.. I've created the Move activity just as you described it and we keep getting an error: 

"errorMessages": "Failed to access target system. Please check credentials and firewall settings on the target system to ensure accessibility: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

We had our AD team grant FULL access to the account we are trying to accomplish this with but still getting the same error.

Really hope you can help! 

Thank you!

[mev]

Looks like firewall issue. Network or security team may need to open up a port for you to access that.

[sidkak]

I have go the same error but with the same credential used in the test inputs I am able to run all the other activities. Also with the same credential I am able to execute the command from my MID Server to the Domain Controller. Not sure why this is happening.

IF the saem user is able to execute the powershell then why service now is not able to use it only in this activity?

[sidkak]

I am able to execute the command from the Mid server to the AD Server using the credential used in SNOW it works as expected

PS C:\Users\Exx-srv-snowacc> Move-ADObject -Identity "CN=Z4082405,OU=Users,OU=HQP,DC=<DC>,DC=COM" -TargetPath "OU=Disabled Users,DC=<DC>,DC=COM"

However when I run the same thing with test inputs from SNOW I get the below error. Any clues on why this might be.

errorMessages": "Failed to access target system.  Please check credentials and firewall settings on the target system to ensure accessibility: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))\n\nStack Trace:    at System.Management.ThreadDispatch.Start()\nat System.Management.ManagementScope.Initialize()\nat System.Management.ManagementObjectSearcher.Initialize()\nat System.Management.ManagementObjectSearcher.Get()\nat Microsoft.PowerShell.Commands.GetWmiObjectCommand.BeginProcessing()\nat System.Management.Automation.Cmdlet.DoBeginProcessing()\nat System.Management.Automation.CommandProcessorBase

Were you able to solve this issue?