Active Directory UDF

[water]

supersonic,

This will be "fixed" with the next AutoIt version. Because the new version no longer relies on a COM error handler.

water

[ludoo]

version 3.3.8.1

[water]

I will test a soon as I'm in my office again.

[water]

I use 3.3.8.1 as well and just ran the _AD_ObjectExists.au3 example script and didn't have a problem.

If you run your own script, can you please post the code?

[ludoo]

it works correctly with version 1.3.0.0, surely a problem connecting with AD

Edited October 19, 2012 by ludoo

[water]

Is it possible to create a small (max. 10 lines) reproducer script?

There are too many includes I need to download and some errors I get.

[l4tran]

I'm trying to add an email field in the general tab of a user but _AD_ModifyAttribute does not work. It works for the First name: , Last name: , Display name: , Description: , Office: but not for E-mail; _AD_AddEmailAddress does not do it either. Any suggestion?

[water]

The email field can't be set by _AD_ModifyAttribute or any other function of the AD UDF. It's set by Exchange as soon as you create a mailbox.

The _AD_AddEmailAddress function "appends an SMTP email address to the 'Email Addresses' tab of an Exchange-enabled AD account."

[l4tran]

Is there a way to create a contact object ? _AD_CreateContact() ?

[water]

At the moment there is no _AD_CreateContact function. But shouldn't be too hard to create one.

Do you have a test environment where you could play with such a function? I only have read access here.

[l4tran]

Yes. Please provide me the code to try.

[water]

Should be something like this (untested):

Func _AD_CreateContact($sAD_OU, $sAD_Contact)

If _AD_ObjectExists($sAD_Contact) Then Return SetError(1, 0, 0)
If Not _AD_ObjectExists($sAD_OU, "distinguishedName") Then Return SetError(2, 0, 0)
Local $sAD_CN = "CN=" & _AD_FixSpecialChars($sAD_Contact)
Local $oAD_OU = __AD_ObjGet("LDAP://" & $sAD_HostServer & "/" & $sAD_OU)
Local $oAD_Contact = $oAD_OU.Create("Contact", $sAD_CN)
#cs
Local $sAD_SamAccountName = StringReplace($sAD_Contact, ",", "")
$sAD_SamAccountName = StringReplace($sAD_SamAccountName, "#", "")
$sAD_SamAccountName = StringReplace($sAD_SamAccountName, "/", "")
$oAD_Contact.sAMAccountName = $sAD_SamAccountName
$oAD_Contact.SetInfo
If @error <> 0 Then Return SetError(@error, 0, 0)
#ce
Return 1

EndFunc ;==>_AD_CreateContact

I'm not sure the part between #cs and #ce is needed.

If the function works can you check that the field "samaccountname" has a value?

[l4tran]

The email field can't be set by _AD_ModifyAttribute or any other function of the AD UDF. It's set by Exchange as soon as you create a mailbox.

The _AD_AddEmailAddress function "appends an SMTP email address to the 'Email Addresses' tab of an Exchange-enabled AD account."

My AD is 2008R2 and my exchange is 2007 with multiple domains. IE: purple.com, orange.com, green.com.

Typically when I create a user in the AD, I specify the E-mail field to abc_user@orange.com. Then in Exchange 2007 when I create a mailbox for abc_user, the email address abc_user@orange.com is automatically created. Is there another way around this?

[l4tran]

Should be something like this (untested):

Func _AD_CreateContact($sAD_OU, $sAD_Contact)

If _AD_ObjectExists($sAD_Contact) Then Return SetError(1, 0, 0)
If Not _AD_ObjectExists($sAD_OU, "distinguishedName") Then Return SetError(2, 0, 0)
Local $sAD_CN = "CN=" & _AD_FixSpecialChars($sAD_Contact)
Local $oAD_OU = __AD_ObjGet("LDAP://" & $sAD_HostServer & "/" & $sAD_OU)
Local $oAD_Contact = $oAD_OU.Create("Contact", $sAD_CN)
#cs
Local $sAD_SamAccountName = StringReplace($sAD_Contact, ",", "")
$sAD_SamAccountName = StringReplace($sAD_SamAccountName, "#", "")
$sAD_SamAccountName = StringReplace($sAD_SamAccountName, "/", "")
$oAD_Contact.sAMAccountName = $sAD_SamAccountName
$oAD_Contact.SetInfo
If @error <> 0 Then Return SetError(@error, 0, 0)
#ce
Return 1

EndFunc ;==>_AD_CreateContact

I'm not sure the part between #cs and #ce is needed.

If the function works can you check that the field "samaccountname" has a value?

Tried it both ways, doesn't work.

[water]

We use a PowerShell script to create the Exchange mailbox (I have posted it somewhre on the forum). All AD settings are then being done automatically. IIRC our Exchange admin has set up some rules on the Exchange server how the mail address has to be created in AD.

As I'm not the AD nor the Exchange admin I don't know for sure what goes on behind the scenes.

[water]

You pass the OU where the contact needs to be created as parameter 1 and the RDN (relative distinguished name) - without the leading "CN=" - as parameter 2?

Edited October 25, 2012 by water

[l4tran]

You pass the OU where the contact needs to be created as parameter 1 and the RDN (relative distinguished name) - without the leading "CN=" - as parameter 2?

I gave parameter 1 and 2 the save as in _AD_createuser().

[l4tran]

We use a PowerShell script to create the Exchange mailbox (I have posted it somewhre on the forum). All AD settings are then being done automatically. IIRC our Exchange admin has set up some rules on the Exchange server how the mail address has to be created in AD.

As I'm not the AD nor the Exchange admin I don't know for sure what goes on behind the scenes.

The AD environment I work in is complicated due to the multiple domain. I can also create a user in Exchange without Powershell, but then the user is created somewhere in the AD OU, which I would have to search and move them to the proper OU. When I add users to the AD, typically I would need to create 4-5 users per location. Some users have mailboxes, some don't. This is why I need to come up with a script to do everything in one shot.

Edited October 25, 2012 by l4tran

[water]

The script we run here does everything in one shot. It creates the user in AD using the functions of the AD UDF. To create the mailbox a PowerShell script is called.

When the script ends the user has all he needs: An AD account assigned to some basic groups, all necessary directories (home, mail archive ...) with correctly set permissions, Exchange mailbox etc.

[water]

If you run the current version of the AD UDF (1.3.0.0) could you please add "_AD_ErrorNotify(2)" at the top of your script and post the returned COM error message?