SMP - Map AD Status from AD Import

In this Article I'm going to show you how to extend the User Resource to include extra properties you can retrieve from the AD Import to gain extra information about your user base. We are going to map the AD Status value (aka UserAccountControl)

First lets create a  Data Class to store this information.

 Settings |  Notification Server |  Resource and Data Class Settings |  Data Classes

Right-Click | New | Editable Data Class

Call it AD User Details 

Add some Fields

• ADStatus (Static List)
• UserAccountControl (String/Integer)
• LastUpdated (Date)

For the Static List add the following values

• Active
• Disabled
• Deleted

If we take a look at an AD User to see what value this is:

What does 512 equate to?

http://www.netvision.com/ad_useraccountcontrol.php

Let's map this value into the new Data Class with the AD Import.

 Settings |  Notification Server |  Microsoft Active Directory Import

Under "User" click on "specified column mappings"

Select the newly created Data Class

Then click on UserAccountControl "(null)" to select a Field

OK | OK

Run the Import Rule 

Now let's create a  CMDB Rule to map this number to some text.

 Settings |  Notification Server |  Connector |  CMDB Rules

SELECT 
    rru.[Guid],
    rru.Name,
    iaud.UserAccountControl,
    GetDate() AS CurrentDateTime
FROM 
    [RM_ResourceUser] rru
INNER JOIN 
    Inv_AD_User_Details iaud 
    ON iaud._ResourceGuid = rru.Guid

Choose the data class of the one you've just created:

I'm getting the current date from SQL.

Anybody know how to get the current DateTime in an Expression?

I've tried the following

• Now()
• Today()
• DateTime.Today

With and without equals...

• https://www-secure.symantec.com/connect/forums/cmdb-rule-help

In the 'AD Status' column choose "<Expression>" from the dropdown

Articles

• Scriptable fields for modifying Resource Import Export and CMDB rules https://support.symantec.com/en_US/article.HOWTO45608.html#v19412924
• Expression Functions https://support.symantec.com/en_US/article.HOWTO45613.html#v19412948
  • IIF https://support.symantec.com/en_US/article.HOWTO45647.html#v22897377

Now we can use a bunch of nested IIFs, it's not eloquent but it works.

IIF([AD User Details.UserAccountControl]='512','Active',
 IIF([AD User Details.UserAccountControl]='514','Disabled',
  IIF([AD User Details.UserAccountControl]='544','Active',
   IIF([AD User Details.UserAccountControl]='546','Disabled',
    IIF([AD User Details.UserAccountControl]='66048','Active',
     IIF([AD User Details.UserAccountControl]='66050','Disabled',
      IIF([AD User Details.UserAccountControl]='66080','Active',
       IIF([AD User Details.UserAccountControl]='66082','Disabled',
        IIF([AD User Details.UserAccountControl]='262656','Active',
         IIF([AD User Details.UserAccountControl]='262658','Disabled',
          IIF([AD User Details.UserAccountControl]='262688','Active',
           IIF([AD User Details.UserAccountControl]='262690','Disabled',
            IIF([AD User Details.UserAccountControl]='328192','Active',
             IIF([AD User Details.UserAccountControl]='328194','Disabled',
              IIF([AD User Details.UserAccountControl]='328224','Active',
               IIF([AD User Details.UserAccountControl]='328226','Disabled','Deleted'
                ))))))))))))))))