If _AD_ObjectExists questions on how to use

[Mattw11486]

I am trying to create a tool that creates robotic IDs across multiple domains without having to manually switch to each domain in AD to create the account.

It works flawlessly however one issue is that if the username does not exist in AD it throws an error when trying to execute -Manager "employeeid" in Powershell.

I tried to remedy this by using the _AD_ObjectExists but I am having some issues with getting it to actually work if the ID does not exist in the domain.

Any thoughts on how I am entering this wrong? Thanks!

 

Edited August 23, 2021 by Mattw11486

[water]

I would use:

            If _AD_ObjectExists($sObject) = 1 Then ; Object exits
                If @error = 0 Then ; Only one object exists and no other error occurred
                    $Managercheck = ' -Manager "' & $sOwner & '"'
                Else
                    $Managercheck = ' '
                EndIf    
            EndIf

[Mattw11486]

When running that command it still tries to enter the -Manager $sOwner string, instead of leaving it blank, if a user does not have an ID in that domain.

 

 

Edited August 23, 2021 by Mattw11486

[water]

I think one problem is caused in the code block for the "LUV Domain" as the Manager is hard coded there.

To solve the second problem you need to connect to the domain you want to check the user for existance.
I don't see a call to _AD_Open in your code snippet. So I assume your script always queries the domain you are connected to (by default).

[water]

Another suggestion for problem #2: Connect to the global catalog (see the wiki). This allows to query all domains in the forest.
https://en.wikipedia.org/wiki/Active_Directory