Job title reverting to old one

you need to find out what workflow inside or outside of ARS changes the attribute back to another value.
Look at Change History on the AD\user and see who does changes - if the revert change is done inside ARS internal automated process or by another ARS_HelpDesk user manually - it will show up in the History Log.
IF not, then look for a scheduled script outside of ARS (ChangeAuditor might help)

Access Templates allow a trustee to change something, but they don't programmatically change anything. There may be a Policy, Workflow, or Scheduled Task which is performing this change.

Check the Active Roles Change History on the object being changed. You should see the name of the operation which performed the change under "Workflow Activities and Policy Actions".

Aidar's advice below to look at the object Change History is spot on.

The key here is to determine whether this flipping of the value is originating from inside or outside of Active Roles.  An obvious question to ask is about the possibility of another automated process such as some kind of directory synch or perhaps an HR provisioning feed making this change.  If the change is initiated from outside of Active Roles, it's quite possible that you won't see anything in the Change History at all. However again as Aidar noted, if you own a product like Change Auditor then you would be able to see who/what is making this change natively in AD.  Worst case, you could always look for this change in the security event logs on your DCs but unfortunately, this can be a bit of needle-in-the-haystack proposition.

Hi,

Thanks for the suggestions.

There is no policy for job title as far as i know.And in change history only shows the changes i have made i.e changing of job to new one not the reverting of title to the old one.

All i can see is that dynamic group as a trustee does show "included query" .Does this mean that it has some query connected which is turning the title back???

Regards,
Pabe

Your findings suggest that some external process is modifying that title directly in Active Directory. Active Roles is not involved.

Hi Johnny ,

what exactly do you mean with "external process is modifying that title"??

Thanks,
Pabe

Hi ,

I can see in logs " Quest changeAuditor Integration Script
Cannot retrieve usnChanged value in onPreModify"


Could you please suggest how we can resolve this error.

BR,
Pabe

Hi Pabe,

What JohnnyQuest is referring to; Any changes performed within Active Roles will be logged in the Change History. Active Roles is unaware of changes performed outside of it, such as someone making an update via Active Directory Users and Computers. So if you're not seeing the title change in the change history, that would suggest that it's not occurring within Active Roles and it's an external tool that's reverting the Title attribute back.

You noted above that you see mention of Change Auditor. This could be to your advantage. If you or someone else has access to Change Auditor, you may be able to track down the change (reverting back) of the Title attribute and see where it's coming from. However, as of now, it doesn't appear that Active Roles is playing any part in reverting the Title value to its original value.

To clarify your question about the dynamic group's 'Include Query' question, that is only used to maintain what members are contained in the group. It has no bearing on any of the group's other attributes.