These functions are used to gather or set values based on other attributes. Some functions will simply return a value and others will return a computed value based on data found within the parameters or complex attribute data.
Purpose: Allow you to lookup a value and replace value with returned value leveraging Data Sets
Example:
lookupvalue("TFH-OUS",S.Department,getdn(cn))
Purpose: Used to encode a string password so that it can be applied to newly created objects in Local AD. This method should not be used to set the password on a cloud object.
Syntax: EncodePwd(password)
Example:
Target Attribute : unicodePwd
Value : EncodePwd(Profile.DefaultPassword)
Condition : Action = "create"
Purpose: Calculates whether to create a target cloud object as enabled or disabled. This does not apply to local AD environments. If the source is a local AD object, the function will read the UserAccountControl and determine if the object should be enabled or disabled.
Syntax: GetAccountDisabled()
Example: This example is also a default mapping for cloud environments. It will set the account as enabled or disabled if we create the object, or update an object that was created by Directory Sync. The limit of only updating objects created by Directory Sync can be removed by removing everything in the condition field.
Target Attribute : AccountDisabled
Value : GetAccountDisabled()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
Purpose: Replaces the domain part of the given attribute with the value specified.
Syntax: ReplaceDomain(attribute, value)
Attribute can be any attribute that contains an @domain…. Value
Value specified can be text or anything that represents a domain name.
Example 1:
This example replaces the Domain value of the source userPrincipalName with the domain value selected in the Stage Data step of a workflow
Target Attribute : userPrincipalName
Value : ReplaceDomain(S.userPrincipalName, Profile.TargetDomain)
Condition : Null
Example 2:
This example replaces the Domain value of the source Target address with the domain value selected in the Stage Data step of a workflow
Target Attribute : TargetAddress
Value : ReplaceDomain(S.TargetAddress, Profile.TargetDomain)
Condition : AllowTargetAddress()
Purpose: Create list of Proxy addresses removing any duplicates that are found.
Syntax: GetProxyAddresses(SourceProxyAddresses,TargetProxyaddresses, address1,Address2,address3)
Example: Local to Local environment merge Source and Target Proxyaddresses in Target Object
Target Attribute : Proxyaddresses
Value : GetProxyAddresses(S.proxyAddresses, T.proxyAddresses, prefix(Result("mail"), "SMTP:"), prefix(legacyExchangeDN, "x500:"), prefix(Result("legacyExchangeDN"), "x500:"))
Condition :
Example: Cloud to Cloud environment. SourceProxyAddresses is set to Null by default to avoid errors adding domains which are not accepted by Office 365.
Target Attribute : Proxyaddresses
Value : GetProxyAddresses(null, T.EmailAddresses, prefix(Result("WindowsEmailAddress"), "SMTP:"), prefix(LegacyExchangeDN, "x500:"))
Condition :
Purpose: Generate a legacyExchangeDN value using the given exchange org and cn.
Syntax: GetLegacyExchangeDN(exchangeOrg, cn)
Example: Set the legacy exchange DN for a user in the target
Target Attribute : legacyExchangeDN
Value : GetLegacyExchangeDN(Target.ExchangeOrg, ObjectId)
Condition : Null
Purpose: Calculates the objectClass from profile settings and the source or target object's class
Syntax: GetObjectClass()
Example: Add (contact) to the end of DisplayName if the target object is a contact, if not a contact set same as the source.
Target Attribute : DisplayName
Value : if(GetObjectClass()="contact", S.DisplayName+" (Contact)", S.DisplayName)
Condition :
Purpose: Calculates targetAddress, by using source primary SMTP, mail, or userPrincipalName
Syntax: GetTargetAddress()
Example: Set the target address for a user with the following attributes
UPN Mail attribute first.m.last@domain.com
Primary SMTP address first.last@domain.com
UPN first.last@domain.com
Target Attribute : targetAddress
Value : GetTargetAddress()
Condition :
This will result in the value of SMTP being used.
Purpose: Determines the correct value for RecipientTypeDetails or msExchRecipientTypeDetails
Syntax: GetRecipientTypeDetails()
Purpose: Action - returns action currently to be taken for this object ("create", "update", or "delete")
Syntax: Action = "create"
Example: Although action could be used within other functions such as case or if, its typical use will be for a condition. In this case we will set the UPN only on create
Target Attribute : userPrincipalName
Value : userPrincipalName
Condition : action = "Create"
Purpose: Returns the calculated mapped value of the given attributeName (must be a string)
Syntax: result("attributeName")
Example: Result is used to gather the value of a mapping which contains a function. This example gathers the results of what the function of the "mail" attribute will be the default value/function for the mail attribute is if(GetObjectClass()="group", ReplaceDomain(WindowsEmailAddress, Profile.TargetDomain), WindowsEmailAddress). The alternative for using result("mail") would be to use the entire function which is present in the mail attribute mapping. The result command allows you to link more complex functions.
Target Attribute : proxyAddresses
Value :
GetProxyAddresses(result("mail"), LegacyExchangeDN, result("legacyExchangeDN"))
Condition : Null
Purpose : This value is an internal value which determines if Directory Sync created the object being synchronized. This value verifies the "created by Dirsync" text is present on the correct attribute for the target object type.
Syntax : Target.HasCreateStamp
Example: You want to set the UserAccountControl value for only objects created by Directory Sync.
Target Attribute : userAccountControl
Value : GetUserAccountControl()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
ConvertValue("base64STR", objectGUID)
Purpose: This function is used for syncing ms-DS-ConsistencyGuid, which is an attribute that cannot be directly migrated with a standard mapping. This function can also be used to set the ImmutableID on a cloud object when merging with a local AD object as part of a B2B user conversion process.
Syntax: ConvertValue("stringtype",objectGUID)
The only string type currently available is base64STR
Example: ConvertValue("base64STR", objectGUID)
Purpose: This method is used to generate a random GUID
Syntax: NewGUID()
Example 1: The following expression will set the target object's CN as a random GUID; this is needed to avoid possible name collision as CN is not a unique attribute in Active Directory.
Select mapping for ‘DistinguishName and double click, enter the below expression under value field:
GetDn(NewGuid())
Example 2: The following expression will set the target object's samAccountName with a random GUID of 20 characters long.
Select mapping for ‘samAccountName and double click, enter the below expression under value field:
Left(NewGuid(), 20)
The following are the target attributes which contain advanced mapping values by default. The defaults differ based on the source and target environment type.
Note: Changing the default advanced mappings may result in unexpected behavior.
distinguishedName
Target Attribute : distinguishedName
Value : GetDN(cn)
Condition : Null
Definition : This creates the DN for the target user. This is defined by the source CN and by reading the Target OU specified within the Stage Data step of a workflow.groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Action = "create"
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the target group type.
legacyExchangeDN
Target Attribute : legacyExchangeDN
Value : GetLegacyExchangeDN(Target.ExchangeOrg, objectGuid)
Condition : Null
Definition : This default mapping will read the exchange org info from the target environment and create the LegacyDN using this value.
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Definition : This will read the objectclass of the target user being created based on settings in the template. Create users as, Create Groups as, etc.
proxyAddresses
Target Attribute : proxyAddresses
Value : GetProxyAddresses(result("mail"), legacyExchangeDN, result("legacyExchangeDN"))
Condition : Null
pwdLastSet
Target Attribute : pwdLastSet
Value : 0
Condition : Action = "create"
targetAddress
Target Attribute : targetAddress
Value : GetTargetAddress()
Condition : AllowTargetAddress()
unicodePwd
Target Attribute : unicodePwd
Value : EncodePwd(Profile.DefaultPassword)
Condition : Action = "create"
userAccountControl
Target Attribute : userAccountControl
Value : GetUserAccountControl()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
Target Attribute : mail
Value : if(GetObjectClass()="group", ReplaceDomain(mail, Profile.TargetDomain), mail)
Condition : Null
distinguishedName
Target Attribute : distinguishedName
Value : GetDN(cn)
Condition : Null
Definition : This creates the DN for the target user. This is defined by the source CN and by reading the Target OU specified within the Stage Data step of a workflow.
groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Action = "create"
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the group type.
legacyExchangeDN
Target Attribute : legacyExchangeDN
Value : GetLegacyExchangeDN(Target.ExchangeOrg, objectGuid)
Condition : Null
msExchRecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
proxyAddresses
Target Attribute : proxyAddresses
Value : GetProxyAddresses(result("mail"), legacyExchangeDN, result("legacyExchangeDN"))
Condition : Null
unicodePwd
Target Attribute : unicodePwd
Value : EncodePwd(Profile.DefaultPassword)
Condition : Action = "create"
userAccountControl
Target Attribute : userAccountControl
Value : GetUserAccountControl()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Password
Target Attribute : Password
Value : Profile.DefaultPassword
Condition : Action = "create"
RecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
WindowsEmailAddress
Target Attribute : WindowsEmailAddress
Value : if(GetObjectClass()="group", ReplaceDomain(WindowsEmailAddress, Profile.TargetDomain), WindowsEmailAddress)
Condition : Action = "create"
EmailAddresses
Target Attribute : EmailAddresses
Value : GetProxyAddresses(result("WindowsEmailAddress"), LegacyExchangeDN, null))
Condition : Null
AccountDisabled
Target Attribute : AccountDisabled
Value : GetAccountDisabled()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Null
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the group type.
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Password
Target Attribute : Password
Value : Profile.DefaultPassword
Condition : Action = "create"
RecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Action = "create"
WindowsEmailAddress
Target Attribute : WindowsEmailAddress
Value : if(GetObjectClass()="group", ReplaceDomain(mail, Profile.TargetDomain), mail)
Condition : Action = "create"
EmailAddresses
Target Attribute : EmailAddresses
Value : GetProxyAddresses(result("WindowsEmailAddress"), LegacyExchangeDN, null))
Condition : Null
The following are the target attributes which contain advanced mapping values by default. The defaults differ based on the source and target environment type.
Note: Changing the default advanced mappings may result in unexpected behavior.
distinguishedName
Target Attribute : distinguishedName
Value : GetDN(cn)
Condition : Null
Definition : This creates the DN for the target user. This is defined by the source CN and by reading the Target OU specified within the Stage Data step of a workflow.groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Action = "create"
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the target group type.
legacyExchangeDN
Target Attribute : legacyExchangeDN
Value : GetLegacyExchangeDN(Target.ExchangeOrg, objectGuid)
Condition : Null
Definition : This default mapping will read the exchange org info from the target environment and create the LegacyDN using this value.
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Definition : This will read the objectclass of the target user being created based on settings in the template. Create users as, Create Groups as, etc.
proxyAddresses
Target Attribute : proxyAddresses
Value : GetProxyAddresses(result("mail"), legacyExchangeDN, result("legacyExchangeDN"))
Condition : Null
pwdLastSet
Target Attribute : pwdLastSet
Value : 0
Condition : Action = "create"
targetAddress
Target Attribute : targetAddress
Value : GetTargetAddress()
Condition : AllowTargetAddress()
unicodePwd
Target Attribute : unicodePwd
Value : EncodePwd(Profile.DefaultPassword)
Condition : Action = "create"
userAccountControl
Target Attribute : userAccountControl
Value : GetUserAccountControl()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
Target Attribute : mail
Value : if(GetObjectClass()="group", ReplaceDomain(mail, Profile.TargetDomain), mail)
Condition : Null
distinguishedName
Target Attribute : distinguishedName
Value : GetDN(cn)
Condition : Null
Definition : This creates the DN for the target user. This is defined by the source CN and by reading the Target OU specified within the Stage Data step of a workflow.
groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Action = "create"
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the group type.
legacyExchangeDN
Target Attribute : legacyExchangeDN
Value : GetLegacyExchangeDN(Target.ExchangeOrg, objectGuid)
Condition : Null
msExchRecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
proxyAddresses
Target Attribute : proxyAddresses
Value : GetProxyAddresses(result("mail"), legacyExchangeDN, result("legacyExchangeDN"))
Condition : Null
unicodePwd
Target Attribute : unicodePwd
Value : EncodePwd(Profile.DefaultPassword)
Condition : Action = "create"
userAccountControl
Target Attribute : userAccountControl
Value : GetUserAccountControl()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Password
Target Attribute : Password
Value : Profile.DefaultPassword
Condition : Action = "create"
RecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
WindowsEmailAddress
Target Attribute : WindowsEmailAddress
Value : if(GetObjectClass()="group", ReplaceDomain(WindowsEmailAddress, Profile.TargetDomain), WindowsEmailAddress)
Condition : Action = "create"
EmailAddresses
Target Attribute : EmailAddresses
Value : GetProxyAddresses(result("WindowsEmailAddress"), LegacyExchangeDN, null))
Condition : Null
AccountDisabled
Target Attribute : AccountDisabled
Value : GetAccountDisabled()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Null
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the group type.
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Password
Target Attribute : Password
Value : Profile.DefaultPassword
Condition : Action = "create"
RecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Action = "create"
WindowsEmailAddress
Target Attribute : WindowsEmailAddress
Value : if(GetObjectClass()="group", ReplaceDomain(mail, Profile.TargetDomain), mail)
Condition : Action = "create"
EmailAddresses
Target Attribute : EmailAddresses
Value : GetProxyAddresses(result("WindowsEmailAddress"), LegacyExchangeDN, null))
Condition : Null
Quest creates software solutions that make the benefits of new technology real in an increasingly complex IT landscape. From database and systems management, to Active Directory and Office 365 management, and cyber security resilience, Quest helps customers solve their next IT challenge now. Around the globe, more than 130,000 companies and 95% of the Fortune 500 count on Quest to deliver proactive management and monitoring for the next enterprise initiative, find the next solution for complex Microsoft challenges and stay ahead of the next threat. Quest Software. Where next meets now. For more information, visit www.quest.com.
Technical support resources
Technical support is available to Quest customers with a valid maintenance contract and customers who have trial versions. You can access the Quest Support Portal at https://support.quest.com.
The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. The Support Portal enables you to:
Submit and manage a Service Request
View Knowledge Base articles
Sign up for product notifications
Download software and technical documentation
View how-to-videos
Engage in community discussions
Chat with support engineers online
View services to assist you with your product.
The following are the target attributes which contain advanced mapping values by default. The defaults differ based on the source and target environment type.
Note: Changing the default advanced mappings may result in unexpected behavior.
distinguishedName
Target Attribute : distinguishedName
Value : GetDN(cn)
Condition : Null
Definition : This creates the DN for the target user. This is defined by the source CN and by reading the Target OU specified within the Stage Data step of a workflow.groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Action = "create"
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the target group type.
legacyExchangeDN
Target Attribute : legacyExchangeDN
Value : GetLegacyExchangeDN(Target.ExchangeOrg, objectGuid)
Condition : Null
Definition : This default mapping will read the exchange org info from the target environment and create the LegacyDN using this value.
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Definition : This will read the objectclass of the target user being created based on settings in the template. Create users as, Create Groups as, etc.
proxyAddresses
Target Attribute : proxyAddresses
Value : GetProxyAddresses(result("mail"), legacyExchangeDN, result("legacyExchangeDN"))
Condition : Null
pwdLastSet
Target Attribute : pwdLastSet
Value : 0
Condition : Action = "create"
targetAddress
Target Attribute : targetAddress
Value : GetTargetAddress()
Condition : AllowTargetAddress()
unicodePwd
Target Attribute : unicodePwd
Value : EncodePwd(Profile.DefaultPassword)
Condition : Action = "create"
userAccountControl
Target Attribute : userAccountControl
Value : GetUserAccountControl()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
Target Attribute : mail
Value : if(GetObjectClass()="group", ReplaceDomain(mail, Profile.TargetDomain), mail)
Condition : Null
distinguishedName
Target Attribute : distinguishedName
Value : GetDN(cn)
Condition : Null
Definition : This creates the DN for the target user. This is defined by the source CN and by reading the Target OU specified within the Stage Data step of a workflow.
groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Action = "create"
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the group type.
legacyExchangeDN
Target Attribute : legacyExchangeDN
Value : GetLegacyExchangeDN(Target.ExchangeOrg, objectGuid)
Condition : Null
msExchRecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
proxyAddresses
Target Attribute : proxyAddresses
Value : GetProxyAddresses(result("mail"), legacyExchangeDN, result("legacyExchangeDN"))
Condition : Null
unicodePwd
Target Attribute : unicodePwd
Value : EncodePwd(Profile.DefaultPassword)
Condition : Action = "create"
userAccountControl
Target Attribute : userAccountControl
Value : GetUserAccountControl()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Password
Target Attribute : Password
Value : Profile.DefaultPassword
Condition : Action = "create"
RecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
WindowsEmailAddress
Target Attribute : WindowsEmailAddress
Value : if(GetObjectClass()="group", ReplaceDomain(WindowsEmailAddress, Profile.TargetDomain), WindowsEmailAddress)
Condition : Action = "create"
EmailAddresses
Target Attribute : EmailAddresses
Value : GetProxyAddresses(result("WindowsEmailAddress"), LegacyExchangeDN, null))
Condition : Null
AccountDisabled
Target Attribute : AccountDisabled
Value : GetAccountDisabled()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Null
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the group type.
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Password
Target Attribute : Password
Value : Profile.DefaultPassword
Condition : Action = "create"
RecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Action = "create"
WindowsEmailAddress
Target Attribute : WindowsEmailAddress
Value : if(GetObjectClass()="group", ReplaceDomain(mail, Profile.TargetDomain), mail)
Condition : Action = "create"
EmailAddresses
Target Attribute : EmailAddresses
Value : GetProxyAddresses(result("WindowsEmailAddress"), LegacyExchangeDN, null))
Condition : Null
The following are the target attributes which contain advanced mapping values by default. The defaults differ based on the source and target environment type.
Note: Changing the default advanced mappings may result in unexpected behavior.
distinguishedName
Target Attribute : distinguishedName
Value : GetDN(cn)
Condition : Null
Definition : This creates the DN for the target user. This is defined by the source CN and by reading the Target OU specified within the Stage Data step of a workflow.groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Action = "create"
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the target group type.
legacyExchangeDN
Target Attribute : legacyExchangeDN
Value : GetLegacyExchangeDN(Target.ExchangeOrg, objectGuid)
Condition : Null
Definition : This default mapping will read the exchange org info from the target environment and create the LegacyDN using this value.
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Definition : This will read the objectclass of the target user being created based on settings in the template. Create users as, Create Groups as, etc.
proxyAddresses
Target Attribute : proxyAddresses
Value : GetProxyAddresses(result("mail"), legacyExchangeDN, result("legacyExchangeDN"))
Condition : Null
pwdLastSet
Target Attribute : pwdLastSet
Value : 0
Condition : Action = "create"
targetAddress
Target Attribute : targetAddress
Value : GetTargetAddress()
Condition : AllowTargetAddress()
unicodePwd
Target Attribute : unicodePwd
Value : EncodePwd(Profile.DefaultPassword)
Condition : Action = "create"
userAccountControl
Target Attribute : userAccountControl
Value : GetUserAccountControl()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
Target Attribute : mail
Value : if(GetObjectClass()="group", ReplaceDomain(mail, Profile.TargetDomain), mail)
Condition : Null
distinguishedName
Target Attribute : distinguishedName
Value : GetDN(cn)
Condition : Null
Definition : This creates the DN for the target user. This is defined by the source CN and by reading the Target OU specified within the Stage Data step of a workflow.
groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Action = "create"
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the group type.
legacyExchangeDN
Target Attribute : legacyExchangeDN
Value : GetLegacyExchangeDN(Target.ExchangeOrg, objectGuid)
Condition : Null
msExchRecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
proxyAddresses
Target Attribute : proxyAddresses
Value : GetProxyAddresses(result("mail"), legacyExchangeDN, result("legacyExchangeDN"))
Condition : Null
unicodePwd
Target Attribute : unicodePwd
Value : EncodePwd(Profile.DefaultPassword)
Condition : Action = "create"
userAccountControl
Target Attribute : userAccountControl
Value : GetUserAccountControl()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Password
Target Attribute : Password
Value : Profile.DefaultPassword
Condition : Action = "create"
RecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
WindowsEmailAddress
Target Attribute : WindowsEmailAddress
Value : if(GetObjectClass()="group", ReplaceDomain(WindowsEmailAddress, Profile.TargetDomain), WindowsEmailAddress)
Condition : Action = "create"
EmailAddresses
Target Attribute : EmailAddresses
Value : GetProxyAddresses(result("WindowsEmailAddress"), LegacyExchangeDN, null))
Condition : Null
AccountDisabled
Target Attribute : AccountDisabled
Value : GetAccountDisabled()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Null
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the group type.
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Password
Target Attribute : Password
Value : Profile.DefaultPassword
Condition : Action = "create"
RecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Action = "create"
WindowsEmailAddress
Target Attribute : WindowsEmailAddress
Value : if(GetObjectClass()="group", ReplaceDomain(mail, Profile.TargetDomain), mail)
Condition : Action = "create"
EmailAddresses
Target Attribute : EmailAddresses
Value : GetProxyAddresses(result("WindowsEmailAddress"), LegacyExchangeDN, null))
Condition : Null
Quest creates software solutions that make the benefits of new technology real in an increasingly complex IT landscape. From database and systems management, to Active Directory and Office 365 management, and cyber security resilience, Quest helps customers solve their next IT challenge now. Around the globe, more than 130,000 companies and 95% of the Fortune 500 count on Quest to deliver proactive management and monitoring for the next enterprise initiative, find the next solution for complex Microsoft challenges and stay ahead of the next threat. Quest Software. Where next meets now. For more information, visit www.quest.com.
Technical support resources
Technical support is available to Quest customers with a valid maintenance contract and customers who have trial versions. You can access the Quest Support Portal at https://support.quest.com.
The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. The Support Portal enables you to:
Submit and manage a Service Request
View Knowledge Base articles
Sign up for product notifications
Download software and technical documentation
View how-to-videos
Engage in community discussions
Chat with support engineers online
View services to assist you with your product.
The following are the target attributes which contain advanced mapping values by default. The defaults differ based on the source and target environment type.
Note: Changing the default advanced mappings may result in unexpected behavior.
distinguishedName
Target Attribute : distinguishedName
Value : GetDN(cn)
Condition : Null
Definition : This creates the DN for the target user. This is defined by the source CN and by reading the Target OU specified within the Stage Data step of a workflow.groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Action = "create"
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the target group type.
legacyExchangeDN
Target Attribute : legacyExchangeDN
Value : GetLegacyExchangeDN(Target.ExchangeOrg, objectGuid)
Condition : Null
Definition : This default mapping will read the exchange org info from the target environment and create the LegacyDN using this value.
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Definition : This will read the objectclass of the target user being created based on settings in the template. Create users as, Create Groups as, etc.
proxyAddresses
Target Attribute : proxyAddresses
Value : GetProxyAddresses(result("mail"), legacyExchangeDN, result("legacyExchangeDN"))
Condition : Null
pwdLastSet
Target Attribute : pwdLastSet
Value : 0
Condition : Action = "create"
targetAddress
Target Attribute : targetAddress
Value : GetTargetAddress()
Condition : AllowTargetAddress()
unicodePwd
Target Attribute : unicodePwd
Value : EncodePwd(Profile.DefaultPassword)
Condition : Action = "create"
userAccountControl
Target Attribute : userAccountControl
Value : GetUserAccountControl()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
Target Attribute : mail
Value : if(GetObjectClass()="group", ReplaceDomain(mail, Profile.TargetDomain), mail)
Condition : Null
distinguishedName
Target Attribute : distinguishedName
Value : GetDN(cn)
Condition : Null
Definition : This creates the DN for the target user. This is defined by the source CN and by reading the Target OU specified within the Stage Data step of a workflow.
groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Action = "create"
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the group type.
legacyExchangeDN
Target Attribute : legacyExchangeDN
Value : GetLegacyExchangeDN(Target.ExchangeOrg, objectGuid)
Condition : Null
msExchRecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
proxyAddresses
Target Attribute : proxyAddresses
Value : GetProxyAddresses(result("mail"), legacyExchangeDN, result("legacyExchangeDN"))
Condition : Null
unicodePwd
Target Attribute : unicodePwd
Value : EncodePwd(Profile.DefaultPassword)
Condition : Action = "create"
userAccountControl
Target Attribute : userAccountControl
Value : GetUserAccountControl()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Password
Target Attribute : Password
Value : Profile.DefaultPassword
Condition : Action = "create"
RecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
WindowsEmailAddress
Target Attribute : WindowsEmailAddress
Value : if(GetObjectClass()="group", ReplaceDomain(WindowsEmailAddress, Profile.TargetDomain), WindowsEmailAddress)
Condition : Action = "create"
EmailAddresses
Target Attribute : EmailAddresses
Value : GetProxyAddresses(result("WindowsEmailAddress"), LegacyExchangeDN, null))
Condition : Null
AccountDisabled
Target Attribute : AccountDisabled
Value : GetAccountDisabled()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Null
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the group type.
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Password
Target Attribute : Password
Value : Profile.DefaultPassword
Condition : Action = "create"
RecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Action = "create"
WindowsEmailAddress
Target Attribute : WindowsEmailAddress
Value : if(GetObjectClass()="group", ReplaceDomain(mail, Profile.TargetDomain), mail)
Condition : Action = "create"
EmailAddresses
Target Attribute : EmailAddresses
Value : GetProxyAddresses(result("WindowsEmailAddress"), LegacyExchangeDN, null))
Condition : Null
The following are the target attributes which contain advanced mapping values by default. The defaults differ based on the source and target environment type.
Note: Changing the default advanced mappings may result in unexpected behavior.
distinguishedName
Target Attribute : distinguishedName
Value : GetDN(cn)
Condition : Null
Definition : This creates the DN for the target user. This is defined by the source CN and by reading the Target OU specified within the Stage Data step of a workflow.groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Action = "create"
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the target group type.
legacyExchangeDN
Target Attribute : legacyExchangeDN
Value : GetLegacyExchangeDN(Target.ExchangeOrg, objectGuid)
Condition : Null
Definition : This default mapping will read the exchange org info from the target environment and create the LegacyDN using this value.
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Definition : This will read the objectclass of the target user being created based on settings in the template. Create users as, Create Groups as, etc.
proxyAddresses
Target Attribute : proxyAddresses
Value : GetProxyAddresses(result("mail"), legacyExchangeDN, result("legacyExchangeDN"))
Condition : Null
pwdLastSet
Target Attribute : pwdLastSet
Value : 0
Condition : Action = "create"
targetAddress
Target Attribute : targetAddress
Value : GetTargetAddress()
Condition : AllowTargetAddress()
unicodePwd
Target Attribute : unicodePwd
Value : EncodePwd(Profile.DefaultPassword)
Condition : Action = "create"
userAccountControl
Target Attribute : userAccountControl
Value : GetUserAccountControl()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
Target Attribute : mail
Value : if(GetObjectClass()="group", ReplaceDomain(mail, Profile.TargetDomain), mail)
Condition : Null
distinguishedName
Target Attribute : distinguishedName
Value : GetDN(cn)
Condition : Null
Definition : This creates the DN for the target user. This is defined by the source CN and by reading the Target OU specified within the Stage Data step of a workflow.
groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Action = "create"
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the group type.
legacyExchangeDN
Target Attribute : legacyExchangeDN
Value : GetLegacyExchangeDN(Target.ExchangeOrg, objectGuid)
Condition : Null
msExchRecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
proxyAddresses
Target Attribute : proxyAddresses
Value : GetProxyAddresses(result("mail"), legacyExchangeDN, result("legacyExchangeDN"))
Condition : Null
unicodePwd
Target Attribute : unicodePwd
Value : EncodePwd(Profile.DefaultPassword)
Condition : Action = "create"
userAccountControl
Target Attribute : userAccountControl
Value : GetUserAccountControl()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Password
Target Attribute : Password
Value : Profile.DefaultPassword
Condition : Action = "create"
RecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Null
WindowsEmailAddress
Target Attribute : WindowsEmailAddress
Value : if(GetObjectClass()="group", ReplaceDomain(WindowsEmailAddress, Profile.TargetDomain), WindowsEmailAddress)
Condition : Action = "create"
EmailAddresses
Target Attribute : EmailAddresses
Value : GetProxyAddresses(result("WindowsEmailAddress"), LegacyExchangeDN, null))
Condition : Null
AccountDisabled
Target Attribute : AccountDisabled
Value : GetAccountDisabled()
Condition : Action = "create" or (Action = "update" and Target.HasCreateStamp)
groupType
Target Attribute : groupType
Value : GetGroupType()
Condition : Null
Definition : This will set the group type on creation. The GetGroupType function looks up the setting in the Template selected to determine the group type.
objectClass
Target Attribute : objectClass
Value : GetObjectClass()
Condition : Action = "create"
Password
Target Attribute : Password
Value : Profile.DefaultPassword
Condition : Action = "create"
RecipientTypeDetails
Target Attribute : RecipientTypeDetails
Value : GetRecipientTypeDetails()
Condition : Action = "create"
userPrincipalName
Target Attribute : userPrincipalName
Value : ReplaceDomain(userPrincipalName, Profile.TargetDomain)
Condition : Action = "create"
WindowsEmailAddress
Target Attribute : WindowsEmailAddress
Value : if(GetObjectClass()="group", ReplaceDomain(mail, Profile.TargetDomain), mail)
Condition : Action = "create"
EmailAddresses
Target Attribute : EmailAddresses
Value : GetProxyAddresses(result("WindowsEmailAddress"), LegacyExchangeDN, null))
Condition : Null
Quest creates software solutions that make the benefits of new technology real in an increasingly complex IT landscape. From database and systems management, to Active Directory and Office 365 management, and cyber security resilience, Quest helps customers solve their next IT challenge now. Around the globe, more than 130,000 companies and 95% of the Fortune 500 count on Quest to deliver proactive management and monitoring for the next enterprise initiative, find the next solution for complex Microsoft challenges and stay ahead of the next threat. Quest Software. Where next meets now. For more information, visit www.quest.com.
Technical support resources
Technical support is available to Quest customers with a valid maintenance contract and customers who have trial versions. You can access the Quest Support Portal at https://support.quest.com.
The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. The Support Portal enables you to:
Submit and manage a Service Request
View Knowledge Base articles
Sign up for product notifications
Download software and technical documentation
View how-to-videos
Engage in community discussions
Chat with support engineers online
View services to assist you with your product.
© ALL RIGHTS RESERVED. Feedback 利用規約 プライバシー Cookie Preference Center
