Hi! Everyone, I have hit another brick wall, but as usually, I'm clueless and hope I can get some knowledge here. I have completed the creation of a Runbook to unlock AD User accounts following the workflow attached. The steps includes; Initialize Data - Get user input for AD User login ID Run .Net Script (Powershell) - Check Input for null value in entry Run .Net Script (Powershell) - Check whether Inputted user login ID user object exist in AD Run .Net Script (Powershell) - Check whether Inputted user login ID user object is enabled and lockout status is true Run .Net Script (Powershell) - Check whether Inputted user login ID user object is in the same AD Group as the Runbook user Run .Net Script (Powershell) - Unlock Inputted user login ID I test run this Runbook in 3 ways; Runbook Tester - Completed successfully Using Run in Runbook Designer - Failed, no pop-up screen to request for input Using Run in Orchestrator Console - Failed, while executing the below script less the quotes "$CurrentUserGroupObj = Get-ADUser -Identity $CurrentUser -Properties MemberOf" Can someone shed some light what is going on? Thank you and best regards. Ronald

The options are: SCSM -> "shoot sparrows with cannons" 3rd party solution -> not allowed Enter the user in the Initialize Data as a second input parameter

There is a 3rd party tool available here: https://au2mator.com/ Maybe this will help to get your requirement done. Regards Andreas Baumgarten (Please don't forget to Accept as answer if the reply is helpful)

Hi! Thanks Andreas but I regret to say that we are not allowed to use other 3rd party software. Will have to make do with existing. Have highlighted that the use of SCSM can do the trick and waiting for reply. Sorry for all the restrictions on my end. Best regards. Ronald

Using SCSM only to get this one requirement done is a little bit like "shoot sparrows with cannons" ;-) But it will work. Kind regards Andreas Baumgarten

Hi! Andreas, Yup it is if there are no other way around this. Thank you for all your kind advise. Best regards. Ronald

Runbook Tester vs Run in Runbook Designer vs Run in Orchestrator Console

Ronald Seow 206

Hi! Everyone,

I have hit another brick wall, but as usually, I'm clueless and hope I can get some knowledge here.

I have completed the creation of a Runbook to unlock AD User accounts following the workflow attached. The steps includes;

Initialize Data - Get user input for AD User login ID
Run .Net Script (Powershell) - Check Input for null value in entry
Run .Net Script (Powershell) - Check whether Inputted user login ID user object exist in AD
Run .Net Script (Powershell) - Check whether Inputted user login ID user object is enabled and lockout status is true
Run .Net Script (Powershell) - Check whether Inputted user login ID user object is in the same AD Group as the Runbook user
Run .Net Script (Powershell) - Unlock Inputted user login ID

I test run this Runbook in 3 ways;

Runbook Tester - Completed successfully
Using Run in Runbook Designer - Failed, no pop-up screen to request for input
Using Run in Orchestrator Console - Failed, while executing the below script less the quotes

"$CurrentUserGroupObj = Get-ADUser -Identity $CurrentUser -Properties MemberOf"

Can someone shed some light what is going on?

Thank you and best regards.
Ronald

XinGuo-MSFT 17,931 Reputation points

2020-08-25T08:13:16.593+00:00

Hi,

What's your Orchestrator version?

Here are some tips for your reference.

How to run Active Directory cmdlets in Orchestrator .Net Activity
Ronald Seow 206 Reputation points

2020-08-26T00:47:35.497+00:00

Hi! XinGuo,

You are right, I check your article and I immediately encountered the error in the version 2 environment. I followed the guide and remodify the Registry (I did it few days back). I am still getting the error running the Runbook in Orchestrator Console with the following error;

Name : Check Group
Type : Run .Net Script
Status : Failed
Publish Data : Error Summary Text
Value : Cannot find an object with identity: '2016SVR3$' under: 'DC=test,DC=com'.

Maybe the other day after I modified the Registry, Runbook Tester can execute my script and now the error is on Console side.

Do you have any idea about this error?

Appreciate your kind advise.

Thank you and best regards.
Ronald
XinGuo-MSFT 17,931 Reputation points

2020-08-26T06:37:08.643+00:00

>Value : Cannot find an object with identity: '2016SVR3$' under: 'DC=test,DC=com'.

'2016SVR3$' looks like a computer account not a user account.
Ronald Seow 206 Reputation points

2020-08-26T07:06:08.477+00:00

Hi XinGuo,

Yes, 2016SVR3 is the computer object of the Orchestrator Server. All the roles of Orchestrator sits on this Server except for the SQL Database Server.

Do you know why this computer object is requested for my Runbook? I have posted the scripts for "Check Group" just now, so you can reference that. Prior to this action, I do have a few more Run .Net Script objects that are also querying AD for user info and no such error. Hence, I have been knocked off course as I do test at every stage.

Kindly advise if you know of anything that can resolve this error.

Thank you.
Ronald

Accepted answer

Andreas Baumgarten 108.8K Reputation points MVP

2020-08-27T09:47:43.543+00:00
The options are:

SCSM -> "shoot sparrows with cannons"

3rd party solution -> not allowed

Enter the user in the Initialize Data as a second input parameter
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

17 additional answers

Andreas Baumgarten 108.8K Reputation points MVP

2020-08-27T07:24:14.387+00:00

There is a 3rd party tool available here: https://au2mator.com/

Maybe this will help to get your requirement done.

Regards

Andreas Baumgarten

(Please don't forget to Accept as answer if the reply is helpful)
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Ronald Seow 206 Reputation points

2020-08-27T07:31:39.9+00:00

Hi!

Thanks Andreas but I regret to say that we are not allowed to use other 3rd party software. Will have to make do with existing. Have highlighted that the use of SCSM can do the trick and waiting for reply.

Sorry for all the restrictions on my end.

Best regards.
Ronald
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Andreas Baumgarten 108.8K Reputation points MVP

2020-08-27T08:11:30.627+00:00

Using SCSM only to get this one requirement done is a little bit like "shoot sparrows with cannons" ;-)

But it will work.

Kind regards
Andreas Baumgarten
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Ronald Seow 206 Reputation points

2020-08-27T08:14:56.657+00:00

Hi! Andreas,

Yup it is if there are no other way around this.

Thank you for all your kind advise.

Best regards.
Ronald
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Runbook Tester vs Run in Runbook Designer vs Run in Orchestrator Console

17 additional answers

Your answer