System Center Orchestrator 2022 and AD Group issue

PerserPolis-1732 1,891

Hi,

I have created a Runbook with following setting for AD User

User's image

It created an AD User and enabled it and enabled Exchange Mailbox.

Now I want to add the new AD User to 3 AD Groups (the groups is called, SDA, FGA, EGT).

I have added to my Runbook the following (Add User to Group)

User's image

I am really not sure what should put on the Group Distinguished Name and User Distinguished Name.

2 answers

Andreas Baumgarten 113.8K Reputation points MVP

2024-12-11T16:22:09.8633333+00:00

Hi @PerserPolis-1732 ,

the User Distinguished Name is available as an output of the Create User. The Distinguished Name of the group you can specify directly or you are using the Get Group activity with a filter on the DisplayName/NetBIOS name of the Group.

The format of a distinguished name looks like this: CN=User1,OU=Sales,DC=Fabrikam,DC=COM or CN=Group1,OU=Sales,DC=Fabrikam,DC=COM

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards

Andreas Baumgarten
Please sign in to rate this answer.

1 person found this answer helpful.
PerserPolis-1732 1,891 Reputation points

2024-12-12T07:24:41.83+00:00

Hi,

Thank you for your replay. I dont really not understand what you mean. Could you please send, a screenshot or your steps?

Thank you

PerserPolis-1732 1,891 Reputation points

2024-12-13T13:42:46.3733333+00:00

Hi,

I have two "Add User to Group"

and put the following settings

for User Distinguished Name (from "enable User"

for Group Distinguished Name, I put here for the GROUP "SDA"

CN=Team_SDA,OU=-AA-SDA,OU=App,OU=DD,OU=DRG,OU=NT_Groups,DC=GAT.local,DC=com

and the for group "FGA" the same settings

Does it works? Could I do that without "GET GROUP" so manually?

Regards
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
XinGuo-MSFT 20,156 Reputation points

2024-12-18T08:03:52.2066667+00:00

Hi,

Yes, you can fill the Distinguished Name directly without "GET GROUP".

The following runbook will list the specific content that needs to be filled in for your reference.

Step Trough can see the step workflow of the Runbook.
Please sign in to rate this answer.
PerserPolis-1732 1,891 Reputation points

2024-12-18T08:21:39.9633333+00:00

If I understand you correctly, It are two Runbooks. One is creating new User and the second is to Get User-->Get Group

What is fill out in Get User and Get Group?

Andreas Baumgarten 113.8K Reputation points MVP

2024-12-18T08:38:41.0666667+00:00

Hi @PerserPolis-1732 ,

this can be done within one runbook.
Create User
Enable User (DN of User from Create User)
Get Group1 (by filter by Name)
Get Group2 (by filter by Name)
Add created User to Group1 (DN of User from Create User, DN from Get Group1)
Add created User to Group2 (DN of User from Create User, DN from Get Group2)

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards

Andreas Baumgarten

PerserPolis-1732 1,891 Reputation points

2024-12-18T08:47:15.5633333+00:00

Hi Andreas,

Thank you for your replay. I cannot understand what by Get Group (filter by name)?

Could you please explain it or send me please some screenshot

Thank you

PerserPolis-1732 1,891 Reputation points

2024-12-23T07:56:25.5866667+00:00

Hi,

any news?

XinGuo-MSFT 20,156 Reputation points

2024-12-25T07:04:04.0266667+00:00

If my understanding is not wrong, it should be like this.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

System Center Orchestrator 2022 and AD Group issue

2 answers

Your answer