--- sourceDocument: Xanadu Create Integrations with Applications sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/integrate-applications Release : - xanadu ft:locale : - en-US ft:publication_title : - Xanadu Create Integrations with Applications ft:clusterId : - crint bundleId : - crint workflow : - Creator --- # Microsoft Active Directory v2 Spoke # Microsoft Active Directory v2 Spoke {#ariaid-title1} * Release version: Xanadu * * Updated October 14, 2025 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 7 minutes to read Create, delete, and manage objects in Microsoft Active Directory, such as users, groups, and computers. ## Request apps on the Store {#ms-ad-v2-spoke__section_ql4_c5k_bwb} Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/bundle/store-release-notes/page/release-notes/store/sn-store-release-notes.html).{#ms-ad-v2-spoke__inline-send-to-store} ## Integration Hub subscription {#ms-ad-v2-spoke__section_rwp_mnx_54b} This spoke requires an Integration Hub subscription. For more information, see [Legal schedules - IntegrationHub overview](https://www.servicenow.com/content/dam/servicenow-assets/public/en-us/doc-type/legal/snc-addendum-integrationhub.pdf). ## Spoke version {#ms-ad-v2-spoke__section_mgn_stv_bsb} Microsoft Active Directory v2 spoke v2.5.2 is the latest version.{#ms-ad-v2-spoke__msadv2} ## Supported versions {#ms-ad-v2-spoke__section_swp_mnx_54b} This spoke was built for Microsoft Active Directory. ## Spoke requirements {#ms-ad-v2-spoke__section_vwp_mnx_54b} Ensure that Active Directory Web Services (ADWS) is deployed in the same server where Microsoft Active Directory is installed. The MID server can access the Active Directory Web Services (ADWS) at port 9389. For more information about ADWS deployment, see Microsoft documentation. In the MID Server and Microsoft Active Directory v2 server, run the following PowerShell commands to install the Active Directory module: PS> Import-Module ServerManager PS> Install-WindowsFeature -Name RSAT-AD-PowerShell ## Spoke dependencies {#ms-ad-v2-spoke__section_xwp_mnx_54b} If you're having trouble installing the app, ensure that these dependent plugins are installed: * Complex Object (com.glide.cobject) * ServiceNow IntegrationHub Runtime (com.glide.hub.integration.runtime) * IHUB Spoke Util Pack (com.snc.ihub_spoke_util_pack) * ServiceNow IntegrationHub Action Step - PowerShell (com.glide.hub.action_step.powershell) {#ms-ad-v2-spoke__ul_ywp_mnx_54b} Note: If used outside the spoke implementation, some of these plugins are licensable features and require licenses. ## Spoke actions {#ms-ad-v2-spoke__section_dxp_mnx_54b} The Microsoft Active Directory v2 spoke provides actions to automate the tasks when events occur in your ServiceNow instance. Available actions include: {#ms-ad-v2-spoke__table_exp_mnx_54b__entry__3} | Category | Action | Description | |-|-|-| | Group Management | Add Computer to Groups | Adds the computer account to one or more groups in the Active Directory (AD). | | Group Management | Add Computers to Group | Adds one or more computer accounts to the group in the Active Directory (AD). | | Group Management | Add User to Groups | Adds a user to one or more groups in the Active Directory (AD). | | Group Management | Add Users to Group | Adds one or more user accounts to the group in the Active Directory (AD). | | Group Management | Create Group | Creates the group in the Active Directory (AD). | | Group Management | Delete Group | Deletes the group from the Active Directory (AD). | | Group Management | Does Group Exists | Checks whether the group exists in the Active Directory (AD). | | Group Management | Is User in Group | Checks if an existing user is already a member of a group in the Active Directory (AD). | | Group Management | Look up Group | Retrieves the group from the Active Directory (AD). | | Group Management | Remove Computer from Groups | Removes the computer account from one or more groups in the Active Directory (AD). | | Group Management | Remove Computers from Group | Removes one or more computers from the group in the Active Directory (AD). | | Group Management | Remove User from Groups | Removes a user from one or more groups in the Active Directory (AD). | | Group Management | Remove Users from Group | Removes one or more users from the group in the Active Directory (AD). | | User Authentication | Change User Password | Changes the user's password in the Active Directory (AD). The password has to match the AD password requirements. | | User Authentication | Look up User Password Expiration Details | Retrieves the password expiration details for the user from the Active Directory (AD). | | User Authentication | Generate Random Password | Generates the random password according to the Active Directory (AD) password policy. | | User Authentication | Is User Locked | Checks the locked status of the user account in the Active Directory (AD). | | User Authentication | Reset User Password | Resets the password of the user in the Active Directory (AD). | | User Authentication | Unlock User | Unlocks the user account in the Active Directory (AD). | | Computer Management | Create Computer | Creates a computer account in the Active Directory (AD). | | Computer Management | Disable Computer | Disables the computer account in the Active Directory (AD). | | Computer Management | Does Computer Exists | Checks the status of the computer account in the Active Directory. | | Computer Management | Is Computer Disabled | Checks the status of the computer account in the Active Directory (AD). | | Computer Management | Enable Computer | Enables the computer account in the Active Directory (AD). | | Computer Management | Look up Computer | Retrieves a computer account from the Active Directory (AD). | | Computer Management | Update Computer | Updates a computer account in the Active Directory (AD). | | Computer Management | Delete Computer | Deletes a computer account from the Active Directory (AD). | | Object Management | Create Object | Creates an object account in the Active Directory (AD). | | Object Management | Update Object OU | Updates the Organizational Unit (OU) of an object account in the Active Directory (AD). | | Object Management | Update Object Expiration | Updates the account expiration date of the object account in the Active Directory (AD). | | Object Management | Look up Object by Filter | Retrieves object accounts based on a search filter in the Active Directory (AD). | | Object Management | Delete Object | Deletes an object account from the Active Directory (AD). | | User Management | Delete User | Deletes the user from Active Directory (AD). | | User Management | Create User | Creates a user account in the Active Directory (AD) and sets a password. Note: From Microsoft Active Directory v2 spoke v2.1.1 onwards, these changes are applicable: * Sam Account Name is available in the Additional Fields drop-down. * When a user is created, the User Principal Name (UPN) is generated in this format: <username>@<DNS-domain-name>. {#ms-ad-v2-spoke__ul_db4_nps_qzb} | | User Management | Disable User (Conversational -ready) | Disables a user account in Active Directory (AD). | | User Management | Does User Exists | Checks whether the user account exists in Active Directory (AD). | | User Management | Update User | Updates a user account in the Active Directory (AD). | | User Management | Enable User (Conversational -ready) | Enables a user account in Active Directory (AD). | | User Management | Look up User (Conversational -ready) | Retrieves a user account from the Active Directory (AD). Note: Now Assist for Conversational Spokes plugin is required to use the conversational ability of the action. | | User Management | Is User Disabled | Checks if the user account is inactive in Active Directory (AD). | | User Management | Get User Additional Fields (Metadata) | Retrieves information from the additional fields in a user account from the Active Directory (AD). | [ ] {#ms-ad-v2-spoke__table_exp_mnx_54b} Note: This spoke isn't tested with a load balancer. ## Available conversational actions {#ms-ad-v2-spoke__section_rtf_1wq_ddc} Install Now Assist for Conversational Spokes and start using the conversational ability of Integration Hub spokes. For more information, see [Now Assist in Conversational Spokes](https://www.servicenow.com/docs/Rcm7IcBP6MRzrPJ39j0yQg "Use Now Assist in Conversational Spokes application to start utilizing the conversational ability of Integration Hub Spoke actions."). {#ms-ad-v2-spoke__table_e2d_fxr_ddc__entry__2} | Action | Usage | |-|-| | Disable User | In the Ask Now Assist to... field, enter the phrase that asks Now Assist to perform the action and press Enter. Disable user "Jack" in Active Directory. | | Enable User | In the Ask Now Assist to... field, enter the phrase that asks Now Assist to perform the action and press Enter. For example, Enable user "Jack" in Active Directory. | | Look up User | In the Ask Now Assist to... field, enter the phrase that asks Now Assist to perform the action and press Enter. For example, Look up user "Jack" in Active Directory. | [Table 1. Supported actions] {#ms-ad-v2-spoke__table_e2d_fxr_ddc} ## Available AI agents {#ms-ad-v2-spoke__section_ord_sls_m2c} Install Now Assist for Integration Hub and start using the available AI agents. For more information, see [Now Assist for Integration Hub](https://www.servicenow.com/docs/7GSiq4zdWPd53KFCZEpCcw "Use the ServiceNow Now Assist AI agents to mimic human-like intelligence by using Large Language Models (LLMs) to perform tasks that range from simple automated responses to complex problem-solving. Utilize the conversational ability of Integration Hub spoke actions."). This spoke provides standalone AI agents that mimic human-like intelligence to perform tasks in your ServiceNow instance. * In the ServiceNow agentic system, you can create an agentic workflow that comprises of a set of large language model (LLM) instructions along with one or more standalone AI agents to execute an objective. See for information about adding AI agents to create agentic workflows as per your requirement and provide the required trigger. You can also search for other available AI agents and add them to your agentic workflow. See [Find AI agents](https://www.servicenow.com/docs/access?context=find-ai-agents&version=xanadu&pubname=xanadu-intelligent-experiences&ft:locale=en-US) for more information. * You can create a clone of the required spoke AI agent and customize it as per your requirement. See for more information about creating a clone. * See for information about AI agents. {#ms-ad-v2-spoke__ul_tjz_vtr_m2c} Available AI agents include: {#ms-ad-v2-spoke__table_vx2_5ls_m2c__entry__2} | AI agent | Description | |-|-| | Microsoft Active Directory object manager | Manages object accounts in the Active Directory (AD) and retrieves their details. | | Microsoft Active Directory user authenticator | Manages user accounts and passwords in the Active Directory (AD) and retrieves their details. | | Microsoft Active Directory group manager | Manages groups in the Active Directory (AD) and retrieves their details. | | Microsoft Active Directory computer manager | Manages computers in the Active Directory (AD) and retrieves their details. | | Microsoft Active Directory user manager | Manages users in the Active Directory (AD) and retrieves their details. | [ ] {#ms-ad-v2-spoke__table_vx2_5ls_m2c} Looking for an AI agent? * There might be AI agents installed with the Now Assist application that are not used in agentic workflows. To learn how to see all agents that are available on your instance, see [Find AI agents](https://www.servicenow.com/docs/access?context=find-ai-agents&version=xanadu&pubname=xanadu-intelligent-experiences&ft:locale=en-US). * To find agents that might not be installed on your instance, visit the [AI Agent Marketplace](https://store.servicenow.com/store/ai-marketplace) on the ServiceNow Store. {#ms-ad-v2-spoke__ul_fjk_5cd_4gc} Note: Ensure that the user running an AI agent has the required roles and permissions to access data or perform operations on data in the table that is associated with the AI agent. ## Connection and credential alias requirements {#ms-ad-v2-spoke__section_kxp_mnx_54b} Integration Hub uses aliases to manage connection and credential information. Using an alias eliminates the need to configure multiple credentials and connection information profiles when using multiple environments. If the connection or credential information changes, you don't need to update any actions that use the connection. For more information, see [Connections and Credentials](https://www.servicenow.com/docs/access?context=r-credentials&version=xanadu&pubname=xanadu-platform-security&ft:locale=en-US). For information about setting up the spoke, see [Set up the Microsoft Active Directory v2 spoke](https://www.servicenow.com/docs/2EghReEm09h93naYsDqjcw#setup-ms-ad-v2 "Integrate the ServiceNow instance and the Microsoft Active Directory v2 spoke by using the Windows credentials to authenticate ServiceNow requests."). ## MID Server requirements {#ms-ad-v2-spoke__section_lxp_mnx_54b} To use these actions, your instance must have a MID Server set up and configured to use PowerShell. For more information about running actions on the MID Server, see [Integration steps](https://www.servicenow.com/docs/lMsjY_7CctwrPET3n66fJw "Enable custom actions to integrate with external systems by activating Integration Hub, which adds integration steps to the Workflow Studio interface."). For more information about the MID Server, see [MID Server](https://www.servicenow.com/docs/access?context=mid-server-landing&version=xanadu&pubname=xanadu-servicenow-platform&ft:locale=en-US). To set up the MID Server for this spoke, see [Set up MID Server for a spoke](https://www.servicenow.com/docs/DFT3jbv2S1jbU9IROzzbQQ "Configure MID Server settings on your ServiceNow instance that enables it to integrate with a third-party application via MID Server after you have set up the connection record for a spoke."). Note: You must install the MID Server and Microsoft Active Directory on different servers.