DSRAZOR
[NEW - Prompt at Runtime Rules]
Now you can specify rules to be entered at runtime for all date, number and text services. When applying a filter, you can now select Prompt for Date at Runtime, Prompt for Text at Runtime, or Prompt for Number at Runtime in the Available Expressions section of the filter. You can add text to display when the user is prompted in the Expression Parameters section to explain to the user what data is being requested.
DSRAZOR Console
[FIX]
Fixed Console issue showing a red arrow if clicking area under "Exit".
DSRAZOR for Windows CONSOLE
AD User Maintenance
[NEW]
Create Users from a Template [UserTemplate.dsr]
Create a user by using department based templates with pre-defined fields already populated.
[NEW]
Copy Existing User [CopyUser.dsr]
Copy existing user accounts/templates.
[NEW]
Copy Existing Group [CopyGroup.dsr]
Copy existing groups. Group membership is also copied.
[NEW]
Move AD Object to a New Container [MoveADObject.dsr]
Find Active Directory Objects and move to another Container.
Assess AD/NTFS Security
[NEW]
Manage AD Object Permission Inheritance [listacl_inherit.dsr]
Document and manage Active Directory Objects permission inheritance status.
DSRAZOR for Windows Services
[UPDATE Button Services]
"AD:Move Home Directory for selected User Account(s)"
Does not show pop-up errors when move is not completed. Check the audit log for details. A tell-tale sign is if you are displaying the home directory location in the ListView where the user was selected from, the home directory path will not be updated. Also check the user's icon: if the move worked, it's a green check mark; if failed, it's a red X.
Auto refresh of ListView columns now works when using these two buttons:
"AD:Change Password for selected Active Directory User Account(s) + Remove Password Not Required and Disabled Flags"
"AD:Assign Single-Use Password for selected Active Directory User Account(s) {Must change password at next logon} + Remove PwdNotRqd/Disable"
[NEW Button Services]
"Close Current Window and the previous N windows"
This service will close the number of windows specified in the Manual Entry Text field prior to the current window, and the window itself.
"AD:Create Organizational Unit"
"AD:Edit Selected single-valued decimal number-based Attribute"
"AD:Move Home Directory for selected User Account(s)"
"AD:Move selected Object(s) (Container to move to must be specified with Display Service - Canonical Name for Move Operation)"
"AD:Allow selected objects DACL to inherit permissions from the parent object and copy all inherited permissions from parent"
"AD:Prevent inherited permissions from being applied to selected object's DACL and convert existing inherited permissions to be explicit"
"AD:Remove inherited permissions from selected objects DACL and prevent permissions from being inherited from parent"
[NEW SERVICE AD:Copy selected User, Group and Contact]
"AD:Copy selected User, Group and Contact Object(s) (Container to move to must be specified with Display Service - Canonical Name for Move/Copy Operation)"
Objects other than users, groups, and contacts will not be copied.
The following attributes will not be copied:
"homeDirectory" a new home directory needs to be created for the object separately. There are too many uncertainties such as where to put the directory, whether or not to even create it, etc.
"homeDrive" see "homeDirectory"
"cn" must be unique for each object
"instanceType" automatically determined by AD
"sAMAccountName" must be unique in Domain
"sAMAccountType" determined by AD
"distinguishedName" determined by AD
"targetAddress" DSRAZOR is not copying any email related attributes
"name" part of RDN, cannot be directly set
"primaryGroupID" It is automatically assigned to RDN 513.
Individual attributes that typically vary from person to person, including:
givenName, initials, sn, userPrincipalName, profilePath, employeeID, homePhone, otherHomePhone, mobile, otherMobile, pager, otherPager, and otherIpPhone
The following attribute "matches" will not be copied:
"*bad*" any attribute with "bad" in it as in badLogonTime, not useful for the new object
"homem*" any attribute with "homem" in it as in "homeMTA" we do not copy Exchange details
"*lastl*" any attribute with "lastl" in it, such as "lastLogon" or "lastLogoff" - not appropriate to copy
"*creation*" any attribute with "creation" in it as in "creationDate"
"*next*" any attribute with "next" in it as in "nextRID"
"*dscore*" any attribute with "dscore" in it as in "dsCorePropagationData" - this is determined by AD
"*mapi*" any attribute with "mapi" in it, not copying email related attributes
"*object*" any attribute with "object" in it as in "objectCategory", "objectSID" - not appropriate to copy
"*usnc*" any attribute with "usnc" in it, for example "uSNChanged" and "uSNCreated" - not appropriate to copy
"*whenc*" any attribute with "whenc" in it as in "whenCreated" - not appropriate to copy
"*mailni*" any attribute with "mailni" in it as in "mailNickName" DSRAZOR does not copy any email related attributes
"*mdb*" any attribute with "mdb" in it as in "homeMDB" DSRAZOR does not copy any email related attributes
"*exch*" any attribute with "exch" in it as in "legacyExchangeDN", "msExchMailboxGuid" we do not copy Exchange details
"*logon*" any attribute with "logon" in it as in "logonCount" - not appropriate to copy
"*pwd*" any attribute containing pwd, as "pwdLastSet" it is not appropriate to copy
The following attributes are properly handled:
"member" This one is for group objects, and will add all source members to the new group.
"memberOf" will make new object a member of all groups listed for original object
A random password will be assigned to user objects and recorded in a password log file that will be noted in a message popup after the copy routine completes for all selected objects.
All other attributes are directly copied and left intact as-is. The audit log records all AD:Copy activity.
[UPDATE - Active Directory Display Services]
The following two services will place a record in the workstation audit log whether the home directory move was successful. If the move worked, look for a green check mark next to the users name. If the move failed, you will find a red X in the same place.
"AD:MODIFY:Move Home Directory Structure for current AD Account to designated location - typically this service is used in a ListView Control"
"AD:MODIFY:Move Home Directory Structure for current AD Account to designated location + grant permissions - typically this service is used in a ListView Control"
[NEW Active Directory Display Services]
"AD:Display Object's Distinguished Name (Canonical Name) (For Move Operation {Button Service})"
This service should appear on a page with a Move Button so that the move service knows the distinguished name of the target location.
"AD:Edit selected Object's selected Attribute and only allow predefined values to be entered (pre-existing value will be allowed to remain)"
If you flag the edit field Read Only then you can only select from the values pre-entered and the value that the attribute already contains, if it was previously set. If you flag the edit field read/write (just uncheck Read Only) then you can enter new values in addition to the predefined list.
"AD:MODIFY:Move Home Directory Structure for current AD Account to designated location - typically this service is used in a ListView Control"
This service will automatically migrate the home directory of all users displayed in the current ListView. The migration will move any files and folders found and update the homeDirectory attribute for each user. All moves will be logged in the access log.
"AD:MODIFY:Move Home Directory Structure for current AD Account to designated location + grant permissions - typically this service is used in a ListView Control"
This service will automatically migrate the home directory of all users displayed in the current ListView. The migration will move any files and found and update the homeDirectory attribute for each user. All moved files will be logged in the access log. Will set the user as owner and gives the user full control permissions to the home directory at the new location
[NEW SERVICE AD:MODIFY:Move current AD Account to designated Container]
"AD:MODIFY:Move current AD Account to designated Container (must be in same Domain) - Create if needed - typically this service is used in a ListView Control"
This service will attempt to create the named OU. It only attempts to create the first OU= in the path, that is, if you specify
<br>OU=new_one,OU=existing_one,DC=,...
then only "OU=new_one" will be created. If the "level up" does not exist, it will not attempt to create it (OU=existing_one).
You can embed a rule to add the date created to the OU name, where you place the embedded rule will determine where in the name the date exists. Examples:
<br>OU=*mmddyy*new_one,OU=existing_one,DC=,...
on October 9, 2006 will result in the creation of an OU by the name of:
<br>OU=100906new_one,OU=existing_one,DC=...
If you specify:
OU=new_one*mmddyy*,OU=existing_one...
then
OU=new_one100906,OU=existing_one...
will be created. You can alternately provide
*ddmmyy* for European date format:
OU=new_one*ddmmyy*
becomes
OU=new_one091006
Only *mmddyy* and *ddmmyy* are currently valid embedded date rules for OU creation.
[NEW File System Display Services]
"FS:DELETE AUTOMATICALLY:SINGLE CONFIRMATION:Delete File (will not delete Directory/Folder Objects)"
This service will automatically delete any files found matching the filter after a single pop-up window asks for confirmation. All deletions will be logged in the access log.
"FS:DELETE AUTOMATICALLY:*NO CONFIRMATION*:Delete File (will not delete Directory/Folder Objects)"
This service will automatically delete files matching the filter without a pop-up confirmation. Use with caution! All deletions will be logged in the access log.
[NEW Exchange Display Services]
"EXCH:MODIFY:HIDE selected AD Account From Exchange Address Lists - typically used in a ListView Control"
This service will hide all users matching the filter in the ListView from Exchange Address Lists and the Global Address List. It is typically used as part of a user-disabling process.
"EXCH:MODIFY:SHOW selected AD Account so it can be seen by Exchange Address Lists - typically used in a ListView Control"
This service will unhide all users matching the filter in the ListView, so they return to visibility in Exchange Address Lists and the Global Address List.
[UPDATE Import Keywords]
_Random Password
Now meets Microsofts password complexity requirements (8 characters, including at least one each of uppercase characters, lowercase characters, and numbers).
[NEW Import Keywords]
_Home Directory Trustee
Shows up when you click on Search Manual Entry. Specify the full LDAP name:
CN=name,OU=container,DC=domain,DC=domain
You can specify as many as you need (one new column per trustee). Position these columns after the one containing the Home Directory to create.
_Create Home Directory SAMNAME
Creates the new users Home Directory and names it with the accounts sAMAccountName, rather than the cn.
DSRAZOR for eDirectory Services
[NEW Screen
Services, Common Buttons]
"Close Current Window and the previous N windows"
This service will close the number of windows specified in the Manual Entry Text field prior to the current window, and the window itself.
[NEW - NDS Services:Attributes]
"NDS:Display Selected Attribute (you choose the attribute to display, 2nd value will be displayed)"
"NDS:Display Selected Attribute (you choose the attribute to display, 3rd value will be displayed)"
"NDS:Display Selected Attribute (you choose the attribute to display, 4th value will be displayed)"
"NDS:Display Selected Attribute (you choose the attribute to display, 5th value will be displayed)"
"NDS:Display Selected Attribute (you choose the attribute to display, 6th value will be displayed)"
"NDS:Display Selected Attribute (you choose the attribute to display, 7th value will be displayed)"
"NDS:Display Selected Attribute (you choose the attribute to display, 8th value will be displayed)"
"NDS:Display Selected Attribute (you choose the attribute to display, 9th value will be displayed)"
"NDS:Display Object's Full Canonical Name [Use for NDS:Create Alias Service]"
"NDS:Display Account's Last Login - Number of Days Since"
"NDS:Display SSL X.509 Certificate Effective Date"
"NDS:Display SSL X.509 Certificate Expiration Date"
"NDS:Display SSL Public Key Certificate Effective Date"
"NDS:Display SSL Public Key Certificate Expiration Date"
"NDS:Modify Selected Attribute for List of Users to be EQUAL to the specific Users' Common Name (CN)"
[NEW - NDS Services:Objects]
"NDS:Rename Object(s)"
"NDS:Create Alias for selected Object in Container identified by "NDS:Display Object's Full Canonical Name [Alias]" Service"
"NDS:Search for any object by Name beginning at selected container or [Root] if no container selected [CLEAR RESULTS FIRST]"
[NEW - Print/Queue
Services]
"NWNDPS:Move selected Print Job to selected NDPS Printer (use "NDS:Display Object's Full Canonical Name (of NDPS Printer)" to indicate destination printer"
"NWNDPS:Pause input to selected NDPS Printer"
"NWNDPS:Resume input for selected NDPS Printer"
"NWNDPS:Pause output from selected NDPS Printer"
"NWNDPS:Resume output for selected NDPS Printer"
"NWNDPS:Reset selected NDPS Printer"
"NWNDPS:Resume (continue) selected NDPS Printer"
"NWNDPS:Send 'Form Feed' to selected NDPS Printer"
[NEW - Volume Services]
"NW:Display Size of Directory + all Subdirectories [Quick Scan]"
"NW:Modify Selected Directory's Space Restriction via NLM (use with NW:List ALL Selected Volume's Directories from current ...)", requires CVMONE.NLM version 1.72b
[NEW - Trustee Services]
"FILE:Delete Trustee (used when viewing File System Trustees)"
[NEW - GroupWise Services]
"NWGWC:List Available GroupWise Distribution List Participation Types (Set TO: as default)"
"NWGWC:List Available GroupWise Distribution List Participation Types"
"NWGWC:Add selected GroupWise user as member of selected Distribution List, use "To:" as the participation type"
"NWGWC:Set Participation Type to Bcc for selected GroupWise Account that is Member of the selected Distribution List"
"NWGWC:Set Participation Type to Cc for selected GroupWise Account that is Member of the selected Distribution List"
"NWGWC:Set Participation Type to To for selected GroupWise Account that is Member of the selected Distribution List"
[UPDATED Services]
"NDS:Add Selected Auxiliary Object Class to NDS Object (i.e. User) (If selected Aux Class has mandatories they will be prefilled with null values)"
"NDS:Display Auxiliary Object Class for Object Create with Required Attributes now handles Auxiliary classes with mandatory attributes
"NWNDPS:Resume Print Job" is now "NWNDPS:Resume Print Job (remove User and Operator Hold)"
"NW:User-Input NetWare File System Path, use with Receive User-Input Path from List Services" (now gets folder space restrictions)
"NW:HOME DIRECTORY:Include in the List the selected NDS Objects Home Directory" (now gets folder space restrictions)
"NW:List Directories on Selected Volume from the Root Directory" (now gets Folder Space Restrictions)
"NDS:Search and Replace on any text-based Attribute [Enter Attr. Below]"
This service was modified to allow setting of additional rules, only rule that will be recognized is "NDS:Display Object's Base Class" and you can only pick one class, if you select multiple only one will be recognized:
"NDS:Search and Replace on any text-based Stream Attribute (i.e. Login Scripts, ZEN Distribution Scripts, etc.) [Enter Attr. Below]"
All Create Object services (including Import) will auto-create an Alias if the
"NDS:Display Object's Full Canonical Name [Use for NDS:Create Alias Service]"
service is on the same screen as the button
"NDS:Delete Member from selected Group via NLM (use when viewing Group Membership)"--> now has a confirmation prompt
"NDS:Delete Member from selected Group (use when viewing Group Membership)"--> now has a confirmation prompt
Edit Wizard DSRE0000.DLL was updated so certain button services can now handle multiple attributes
Search buttons now all default to partial match
CSV imports now handle columns that have "<none>".
DSRAZOR exports fill in empty fields with "<none>".
[FIXES]
"NDS::List Last User Created" - you can now create GroupWise accounts when using this service
"NDS:Erase all values for the "Other Name" NDS Attribute for selected NDS Objects" - used to work with USER objects only, now works with ANY object type
"NDS:Edit Selected Attribute (you choose the attribute to display, only 1st value displayed)" - checkboxes now work with certain boolean attributes
CVMONE.NLM
[NEW]
CVMONE.NLM can now change directory space restrictions (requires CVMONE.NLM version 1.72b).
|
