IntegrationHub AD Spoke only allows setting of limited attributes on Users. What is the best practice method for setting attributes not available in the Spoke Actions?

[Paul Tourville]

I'm trying to automate the creation of Service Accounts in AD, using the Microsoft AD Spoke in IntegrationHub, but the Create User and Update User actions as part of the spoke do not permit setting attributes like CannotChangePassword and PasswordNeverExpires. What is the "Best Practice" way to achieve this? I've been trying to work out getting it done via remote PS execution, but I'm getting back errors indicating there's an issue with "TrustedHosts" which does not come up when using the spoke against the same DC

[Richard Hine]

Paul,

Whilst this is not straight forward, I don't think it is impossible. If I was looking to do this, I would start by creating a copy of the Update User Action and make a copy the underlying MID Server script file 'ActionUpdateADUser.ps1' with a new file name.

I would then customise the new copy of the MID Server Script File to include the attributes I wanted to add, then map the new script into the copied FD Action and then build up the copied FD Action to take those attributes as inputs and handle them in its processing.

Hope this is of some help,

Richard

[alexgg57]

Use a Custom PS Scripts and do whatever you need.