Script repository
The script checks whether the email address and username specified for a new user are unique. If either the username or the email address are not unique, user creation will be cancelled. To execute the script, create a business rule triggering Before creating a user.
# Build criteria
if (-not([System.String]::IsNullOrEmpty("%mail%")))
{
$expression = {sAMAccountName -eq "%username%" -or mail -eq "%mail%"}
}
else
{
$expression = {sAMAccountName -eq "%username%"}
}
$criteria = New-AdmCriteria -Type "user" -Expression $expression
# Search parameters
$searcher = $Context.TargetObject
$searcher.Criteria = $criteria
$searcher.SearchScope = "ADS_SCOPE_SUBTREE"
$searcher.PageSize = 500
$searcher.ReferralChasing = "ADS_CHASE_REFERRALS_NEVER"
$searcher.VirtualRoot = $True
$searcher.SizeLimit = 1
try
{
# Execute search
$searchResultIterator = $searcher.ExecuteSearch()
$searchResults = $searchResultIterator.FetchAll()
if ($searchResults.Length -ne 0)
{
$Context.Cancel("A user with the same username or email address already exists")
return
}
}
finally
{
# Release resources
$searchResultIterator.Dispose()
}
Comments 9
You must be signed in to comment.
Ray Bilyk
Is there a way to get an email if the new user creation is cancelled due to lack of uniqueness?
Support
Hello Ray,
Yes, it is possible. You can use the $Context.SendMail method right after the following line in the script:
$Context.Cancel("A user with the same username or email address already exists")
Should you have any issues updating the script to meet your needs, please, describe the desired behavior in all the possible details with live examples.
Baul
Hello
Is there a way to modify the username from the already existing one to another username for the new user?
Like this: Already existing username ("pak") > new user ("pki")
Support
Hello,
Yes, it is possible. For details and examples, have a look at the following tutorial: https://www.adaxes.com/help/ValidateModifyUserInputWithScript.
Baul
Thank you, i will try if it works.
Mark Monaco
Is there a way to modify this script so that it checks if a name and email address already exist for a group (either a mail-enabled security group or a distribution list)?
Support
Hello Mark,
You just need to update the criteria potion accordingly. The following article will be helpful: https://adaxes.com/sdk/HowDoI.BuildCriteria.
Grant
Is it possible to have this scoped to a specific domain? We have multiple domains managed in Adaxes and only want the searcher to search in one of the domains, not all of them.
I'm trying to figure this out for myself and this is what I came up with, searching for members of the Domain Users group:
Build criteria
if (-not([System.String]::IsNullOrEmpty("%mail%"))) { $expression = {(sAMAccountName -eq "%username%" -or mail -eq "%mail%") -and (memberOf -eq "CN=Domain Users,CN=Users,DC=contoso,DC=com")} } else { $expression = {sAMAccountName -eq "%username%" -and memberOf -eq "CN=Domain Users,CN=Users,DC=contoso,DC=com"} } $criteria = New-AdmCriteria -Type "user" -Expression $expression
Support
Hello Grant,
Yes, it is possible and there is no need to change the criteria. You just need to specify the proper object as search base and remove searching within all managed domains. For example: