--- sourceDocument: Zurich ServiceNow AI Platform Capabilities sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/servicenow-platform Release : - zurich ft:locale : - en-US ft:publication_title : - Zurich ServiceNow AI Platform Capabilities ft:clusterId : - platcap bundleId : - platcap workflow : - Platform --- # Active Directory activity pack # Active Directory activity pack {#ariaid-title1} * Release version: Zurich * * Updated July 31, 2025 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read The Active Directory (AD) activity pack enables an administrator to create, delete, and manage objects in Windows Active Directory, such as users, groups, and computers, using a ServiceNow Orchestration workflow. Activities in this pack can reset a password automatically from a user request or manage any user account in Active Directory, whether or not it was created by a Orchestration workflow. Domain controllers are identified by the IP address of the host machine. To use the hostname of the domain controller, add the Resolve DNS Name activity to resolve the hostname into an IP, and then pass the IP into the Active Directory activity. Your instance must have access to a MID Server configured to use PowerShell to run these activities. Note: All Active Directory activities pass through error messages returned from Active Directory. To view these error messages, point to the failed activity in the workflow canvas or select the Workflow Log tab in a [Workflow Context](https://www.servicenow.com/docs/access?context=r_AdministeringWorkflowContexts&version=zurich&pubname=zurich-build-workflows&ft:locale=en-US) record. ## Custom Active Directory activities Orchestration provides custom Active Directory activities that were created with the Orchestration [Create a PowerShell activity](https://www.servicenow.com/docs/7rw4KTFxur9Tncmnihh_qw#t_CreateAPowershellActivity "Create a custom PowerShell activity return data to a workflow from a host using Microsoft PowerShell."), starting with the Geneva release. These activities perform the same functions as AD activities by the same name from previous releases and replace those activities for all new workflows. Existing workflows from earlier versions that were created with legacy AD activities continue to function normally after an upgrade to Istanbul. However, all new workflows must use these custom AD activities. The Powershell activity template gives workflow administrators the ability to store input and output variables from the [Query AD](https://www.servicenow.com/docs/EjAeDqQq3f0CpOTS3XXSrQ "The Query AD activity retrieves entries from the Windows Active Directory based on an LDAP search filter and stores the results as a JSON string that can be used in the data bus.") activity in the [Databus](https://www.servicenow.com/docs/eq4bPG7dWqEaSzz7QxNlZg#t_ReuseDataInTheActivityDesigner "The Data tab in the Workflow Editor lists all custom activities used in the current workflow that produce data and displays that data for reuse in other custom activities."). Note: To use the Active Directory custom activities, you must [request activation](https://www.servicenow.com/docs/EsQq896ok~824R3fcYnZiQ "Activity packs are available with your subscription to Orchestration.") of the Orchestration - Active Directory plugin. ## Active Directory credentials with LDAP {#c_OrchActiveDirectoryActivities__AD-LDAP-Credentials} If you are using an LDAP Server with MID Servers, note that Orchestration and Active Directory activities do not use the user name and password configured on LDAP Servers. You must create a [Windows type orchestration credential record](https://www.servicenow.com/docs/access?context=r_WindowsCredentialsForm&version=zurich&pubname=zurich-platform-security&ft:locale=en-US) [Windows credentials](https://www.servicenow.com/docs/access?context=r_WindowsCredentialsForm&version=zurich&pubname=zurich-platform-security&ft:locale=en-US). The username and password in the credentials record is used for LDAP queries that Orchestration and workflow activities perform. ## Connection port used by AD Orchestration activities All Active Directory activities use port 389 for LDAP access. If you are using AD activities with Oracle Virtual Directory (OVD) as a proxy, set up pass-through on port 389 only. * **[Add User to Group AD activity](https://www.servicenow.com/docs/O1OIe7Uu1D40ZXtMBwHQIQ)** The Add User to Group activity adds a user to a group in Windows Active Directory. * **[Change AD User Password activity](https://www.servicenow.com/docs/Y_aA4OCiujov_CEuGnIhOA)** The Change AD User Password activity changes the password for an Active Directory user account. * **[Create AD Object activity](https://www.servicenow.com/docs/o_aK0VmY7IHmfG_HbAfaSg)** The Create AD Object activity creates an object in Windows Active Directory. * **[Disable AD User Account activity](https://www.servicenow.com/docs/v9IHt1SvPdwAKFzUyQbiZQ)** The Disable AD User Account activity disables a Windows Active Directory user account, making it inactive. * **[Enable AD User Account activity](https://www.servicenow.com/docs/5w6fyCxlE0ePizNKjLG0jg)** The Enable AD User Account activity enables a Windows Active Directory user account, making it active. * **[Is AD Account Locked activity](https://www.servicenow.com/docs/wVVVyY_xUW1i2Vh5TR~keQ)** The Is AD Account Locked activity determines whether an Active Directory user account is locked. * **[Query AD activity](https://www.servicenow.com/docs/EjAeDqQq3f0CpOTS3XXSrQ)** The Query AD activity retrieves entries from the Windows Active Directory based on an LDAP search filter and stores the results as a JSON string that can be used in the data bus. * **[Remove AD Object activity](https://www.servicenow.com/docs/Exxl0S3LNr~oVT_KhmjEqQ)** The Remove AD Object activity deletes an object from Windows Active Directory. * **[Remove User from Group AD activity](https://www.servicenow.com/docs/4gDejlUqVJau_coTULhi~A)** The Remove User from Group activity removes a user from a group in Windows Active Directory. * **[Reset AD User Password activity](https://www.servicenow.com/docs/rEsKpEL9GFAKhZsUxzLP7Q)** The Reset AD User Password activity resets the password of a user account in Windows Active Directory. * **[Unlock AD Account activity](https://www.servicenow.com/docs/v__q6kSGvRIyPjXLaDzBNQ)** The Unlock AD Account activity unlocks a locked Active Directory user account. * **[Update AD Object activity](https://www.servicenow.com/docs/b3fBnno95CcB6sQH~4DhRw)** The Update AD Object activity updates an object in Windows Active Directory.