• State Suggested Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 2 answers
  • Subscribers 62 subscribers
  • Views 5559 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Dynamic list edsaDGConditionsList content.

robert.herman
over 7 years ago

I need a command that will pull the rule sets content from my dynamic groups.

I can get the basic attributes with Get-QADGroup SG-Everyone_RTP-Auto | export-csv c:\temp\bobtest.csv but I can not get the content of the edsaDGConditionsList attribute.

 

Thank you

Parents
  • 0 over 7 years ago

    my understanding is:
    1. Is the attribute format documented and supported?
    2. ARS used to store the DG configuration on AD\group in AD attribute (maybe: adminDescription?, maybe it was changed in new ARS to edsaDGConditionsList?) in XML format, containing: ldap query, ARS version, ARS Admin Service instance to control/enforce the group membership etc…
    3. #2 - the XML format was not documented, “know-how” and, therefore, any modification of it no by ARS is not supported?
    4. You can see DG ldap query on the AD\group itself (in ARS MMC)
    5. (probably) you may report on it using ARS SSRS report pack | ARS Configuration Reports (ARS AT Links, Policy Links etc..) though the reports were basic and limited.

    PS: ARS MMC (ldap) search UI provides option to enumerate all Dynamic Groups in Managed Domains.

Reply
  • 0 over 7 years ago

    my understanding is:
    1. Is the attribute format documented and supported?
    2. ARS used to store the DG configuration on AD\group in AD attribute (maybe: adminDescription?, maybe it was changed in new ARS to edsaDGConditionsList?) in XML format, containing: ldap query, ARS version, ARS Admin Service instance to control/enforce the group membership etc…
    3. #2 - the XML format was not documented, “know-how” and, therefore, any modification of it no by ARS is not supported?
    4. You can see DG ldap query on the AD\group itself (in ARS MMC)
    5. (probably) you may report on it using ARS SSRS report pack | ARS Configuration Reports (ARS AT Links, Policy Links etc..) though the reports were basic and limited.

    PS: ARS MMC (ldap) search UI provides option to enumerate all Dynamic Groups in Managed Domains.

Children
No Data