Example Project - Assign User To Multiple Groups in AD

[isupport]

This example project assigns multiple groups for a new user account in Active Directory. Supply the users by using first name and last name. Make sure the %Domain% and %DomainController% variables are set correctly.

Make sure the groups exist before you start User Management Resource Administrator, since they are cached when you run the project for the first time. Use Tools - Reset to refresh this internal database.

Download Example project here
_________________
Best regards,
Tools4ever Support Desk
International Support

MonitorMagic - Pro-active systems and network monitoring
User Management Resource Administrator - Migration and Delegation solutions
SpaceGuard SRM - Directory based quota management

[MikeMcC]

I reviewed the project and the way it's been configured certainly makes sense. However, I still cannot add users to multiple groups. I receive errors when I run the project. Please find the log below:

Starting User Management Resource Administrator session, build 1065 at 12:25:02 10/20/2004
12:25:02 10/20/2004 ***** Processing entry 1...
12:25:02 10/20/2004 Variable 1: %FirstName%=John
12:25:02 10/20/2004 Variable 2: %LastName%=Smith
12:25:02 10/20/2004 Variable 3: %GroupAssignment1%=Group1
12:25:02 10/20/2004 Variable 4: %GroupAssignment2%=Group2
12:25:02 10/20/2004 Variable 5: %GroupAssignment3%=Group3
12:25:02 10/20/2004 Creating AD account in specified domain: 'support.usa.tools4ever.com'.
12:25:02 10/20/2004 Creating AD account in container 'Users'.
12:25:02 10/20/2004 Creating AD account in Organizational Unit-Container: 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'.
12:25:02 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com': Using name generation algorithm 'Default', 1000000 iterations maximum for duplicate names.
12:25:02 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. Common name of user set to 'John %MiddleName% Smith'.
12:25:02 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. SAM account name (username) of user set to 'smithj%'.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. LDAP attribute 'userPrincipalName' of object 'John %MiddleName% Smith' set to 'smithj%'.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. LDAP attribute 'displayName' of object 'John %MiddleName% Smith' set to 'John %MiddleName% Smith'.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. LDAP attribute 'givenName' of object 'John %MiddleName% Smith' set to 'John'.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. LDAP attribute 'sn' of object 'John %MiddleName% Smith' set to 'Smith'.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. Boolean parameter 'Account disabled'=FALSE (101034). Result not changed.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. Boolean parameter 'Password never expires'=FALSE (101032). Result not changed.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. Boolean parameter 'Store password using reversible encryption'=FALSE (101033). Result not changed.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. Boolean parameter 'Smart card is required for interactive logon'=FALSE (101035). Result not changed.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. Boolean parameter 'Account is trusted for delegation'=FALSE (101036). Result not changed.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. Boolean parameter 'Account is sensitive and cannot be delegated'=FALSE (101037). Result not changed.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. Boolean parameter 'Use DES encryption types for this account'=FALSE (101038). Result not changed.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. Boolean parameter 'Don't require Kerberos preauthentication'=FALSE (101039). Result not changed.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. Account expiration date not specified for new user 'John %MiddleName% Smith' object.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. User 'John %MiddleName% Smith' successfully created.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. Password set for new user object 'John %MiddleName% Smith'.
12:25:03 10/20/2004 Creating AD user account in container/OU 'LDAP://ORC/CN=Users,DC=support,DC=usa,DC=tools4ever,DC=com'. Flag 'User Cannot Change Password' not changed from default value (FALSE).
12:25:24 10/20/2004 Error 0x8007203a (8250) finding LDAP name of group 'SUPPORT\Group1' (pre-Windows 2000 name). Cannot initialize directory search in 'LDAP://SUPPORT'. The server is not operational.
12:25:24 10/20/2004 Error 8250 adding user account to group(s). Cannot determine LDAP name of group 'SUPPORT\Group1'.
12:25:24 10/20/2004 Error in action 'Set user group memberships (AD)'. Script continues.
12:25:24 10/20/2004 ***** Ready processing entry 1...
_________________
Best regards,
Tools4ever Support Desk
New York Office

[isupport]

Hi Mike,

I expect that your base AD environment may not be functioning perfectly. The other error related to the multiple groups (Frank Lopez) is also one that should not happen. Before we go into WebEx, can you examine your system, DNS and application event logs to see if there are any issues and debug them? Also, to debug DNS issues, try to use the nslookup command line tool to test DNS queries.

Try to run the following Microsoft Support Tools:
1. Netdiag
2. Dcdiag
These tools run a series of tests and produce a detailed report.
_________________
Best regards,
Tools4ever Support Desk
International Support

MonitorMagic - Pro-active systems and network monitoring
User Management Resource Administrator - Migration and Delegation solutions
SpaceGuard SRM - Directory based quota management

[MikeMcC]

I ran both the dcdiag and netdiag tools, both generated errors which I can't make much sense of. Event viewer's system log also displays many errors which seem to be related to DNS. I must tell you that I've never done any serious DNS configuration before so I'm not sure what to modify. I will email you the dcdiag, netdiag, and event logs.
_________________
Best regards,
Tools4ever Support Desk
New York Office

[isupport]

[isupport]

The project has been confirmed to work correctly, any errors in this topic were related to a faulty Active Directory installation.
_________________
Best regards,
Tools4ever Support Desk
International Support

MonitorMagic - Pro-active systems and network monitoring
User Management Resource Administrator - Migration and Delegation solutions
SpaceGuard SRM - Directory based quota management