Add new Security Groups

Hi Dear;
is there a way to add new security groups in
Document Numbering
Price List
Query Manager
best regards;

Hello Gordon;
in the document numbering and the price list, you have to define a group, it's very clear
it's a security group and you have to give authorization to the user
is there a way to add more groups
regards;

Similar Messages

Error while adding new security group in content server

Hi,
When i am trying to add new security group in UCM using User Admin applet i am getting following error:
Event generated by user 'weblogic' at host 'vpunvfpctnsz-07.ad.infosys.com:16200'. Unable to execute service ADD_GROUP and function insertGroupRow.
Unable to execute query 'IroleDefinition(INSERT INTO RoleDefinition (dGroupName, dRoleName, dPrivilege, dRoleDisplayName)
values ('Test_111', 'admin', 0, ''))'. ORA-00001: unique constraint (DEV_OCS.PK_ROLEDEFINITION) violated
java.sql.SQLIntegrityConstraintViolationException: ORA-00001: unique constraint (DEV_OCS.PK_ROLEDEFINITION) violated. [ Details ]
An error has occurred. The stack trace below shows more information.
!csUserEventMessage,weblogic,vpunvfpctnsz-07.ad.infosys.com:16200!$!csServiceDataException,ADD_GROUP,insertGroupRow!$!csDbUnableToExecuteQuery,IroleDefinition(INSERT INTO RoleDefinition (dGroupName\, dRoleName\, dPrivilege\, dRoleDisplayName)<br> values ('Test_111'\, 'admin'\, 0\, ''))!$ORA-00001: unique constraint (DEV_OCS.PK_ROLEDEFINITION) violated<br>!syJavaExceptionWrapper,java.sql.SQLIntegrityConstraintViolationException: ORA-00001: unique constraint (DEV_OCS.PK_ROLEDEFINITION) violated<br>
intradoc.common.ServiceException: !csServiceDataException,ADD_GROUP,insertGroupRow!$
at intradoc.server.ServiceRequestImplementor.buildServiceException(ServiceRequestImplementor.java:2071)
at intradoc.server.Service.buildServiceException(Service.java:2207)
at intradoc.server.Service.createServiceExceptionEx(Service.java:2201)
at intradoc.server.Service.createServiceException(Service.java:2196)
at intradoc.server.ServiceRequestImplementor.handleActionException(ServiceRequestImplementor.java:1736)
at intradoc.server.ServiceRequestImplementor.doAction(ServiceRequestImplementor.java:1691)
at intradoc.server.Service.doAction(Service.java:476)
at intradoc.server.ServiceRequestImplementor.doActions(ServiceRequestImplementor.java:1439)
at intradoc.server.Service.doActions(Service.java:471)
at intradoc.server.ServiceRequestImplementor.executeActions(ServiceRequestImplementor.java:1371)
at intradoc.server.Service.executeActions(Service.java:457)
at intradoc.server.ServiceRequestImplementor.doRequest(ServiceRequestImplementor.java:723)
at intradoc.server.Service.doRequest(Service.java:1865)
at intradoc.server.ServiceManager.processCommand(ServiceManager.java:435)
at intradoc.server.IdcServerThread.processRequest(IdcServerThread.java:265)
at intradoc.idcwls.IdcServletRequestUtils.doRequest(IdcServletRequestUtils.java:1332)
at intradoc.idcwls.IdcServletRequestUtils.processFilterEvent(IdcServletRequestUtils.java:1678)
at intradoc.idcwls.IdcIntegrateWrapper.processFilterEvent(IdcIntegrateWrapper.java:221)
at sun.reflect.GeneratedMethodAccessor120.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at idcservlet.common.IdcMethodHolder.invokeMethod(IdcMethodHolder.java:87)
at idcservlet.common.ClassHelperUtils.executeMethodEx(ClassHelperUtils.java:305)
at idcservlet.common.ClassHelperUtils.executeMethodWithArgs(ClassHelperUtils.java:278)
at idcservlet.ServletUtils.executeContentServerIntegrateMethodOnConfig(ServletUtils.java:1592)
at idcservlet.IdcFilter.doFilter(IdcFilter.java:330)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:94)
at java.security.AccessController.doPrivileged(Native Method)
at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:313)
at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:414)
at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:138)
at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.dms.wls.DMSServletFilter.doFilter(DMSServletFilter.java:330)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.doIt(WebAppServletContext.java:3684)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3650)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2268)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Caused by: intradoc.data.DataException: !csDbUnableToExecuteQuery,IroleDefinition(INSERT INTO RoleDefinition (dGroupName\, dRoleName\, dPrivilege\, dRoleDisplayName)
* values ('Test_111'\, 'admin'\, 0\, ''))!$ORA-00001: unique constraint (DEV_OCS.PK_ROLEDEFINITION) violated* at intradoc.jdbc.JdbcWorkspace.handleSQLException(JdbcWorkspace.java:2441)
at intradoc.jdbc.JdbcWorkspace.execute(JdbcWorkspace.java:584)
at intradoc.server.UserService.insertGroupRow(UserService.java:1201)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at intradoc.common.IdcMethodHolder.invokeMethod(IdcMethodHolder.java:86)
at intradoc.common.ClassHelperUtils.executeMethodEx(ClassHelperUtils.java:310)
at intradoc.common.ClassHelperUtils.executeMethod(ClassHelperUtils.java:295)
at intradoc.server.Service.doCodeEx(Service.java:549)
at intradoc.server.Service.doCode(Service.java:504)
at intradoc.server.ServiceRequestImplementor.doAction(ServiceRequestImplementor.java:1622)
... 39 more
Caused by: java.sql.SQLIntegrityConstraintViolationException: ORA-00001: unique constraint (DEV_OCS.PK_ROLEDEFINITION) violated
at oracle.jdbc.driver.SQLStateMapping.newSQLException(SQLStateMapping.java:89)
at oracle.jdbc.driver.DatabaseError.newSQLException(DatabaseError.java:135)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:210)
at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:473)
at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:423)
at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:1095)
at oracle.jdbc.driver.T4CStatement.doOall8(T4CStatement.java:193)
at oracle.jdbc.driver.T4CStatement.executeForRows(T4CStatement.java:1028)
at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1379)
at oracle.jdbc.driver.OracleStatement.doScrollExecuteCommon(OracleStatement.java:5846)
at oracle.jdbc.driver.OracleStatement.doScrollStmtExecuteQuery(OracleStatement.java:5989)
at oracle.jdbc.driver.OracleStatement.executeUpdateInternal(OracleStatement.java:2012)
at oracle.jdbc.driver.OracleStatement.executeUpdate(OracleStatement.java:1958)
at oracle.jdbc.driver.OracleStatementWrapper.executeUpdate(OracleStatementWrapper.java:301)
at weblogic.jdbc.wrapper.Statement.executeUpdate(Statement.java:503)
at intradoc.jdbc.JdbcWorkspace.execute(JdbcWorkspace.java:564)
... 50 more
I checked in database , the security group Test_111 is not present in ROLEDEFINITION table.
What could be the issue?
Regards,
Minal

1) Try importing CMU bundle with 'Overwrite Duplicates' option unchecked .
2) In the CMU bundle, open file roles_guest.hda and see if 'guest' role has access to any group that start with special character or group you haven't created in the system..
Eg: guest
#AppsGroup
0
Also open securitygroups folder in CMU bundle, and see if you can find any groups that starts with special character or group you haven't created in the system.
3) Identify that group and execute below query in the UCM database.
select * from roledefinition where dgroupname= '#AppsGroup';
Replace '#AppsGroup' with the groupname you identified.
4) Solution would be to delete all the rows with dgroupname= '#AppsGroup' from the 'roledefinition' table.
delete from roledefinition where dgroupname= '#AppsGroup';
Replace '#AppsGroup' with the groupname you identified.

New security group then added into either built in administrator or domain admin group

I am having windows 2012 R2 DC so i need to create administrator group please let me know if we create new security group then added into either built in administrator or domain admin group it will work? i have tried but not working any other alternative
methods to get admin access

Controlling local group membership could be done by GPOs:
Using Group Policy Restricted Groups: http://social.technet.microsoft.com/wiki/contents/articles/20402.active-directory-group-policy-restricted-groups.aspx
Using a startup script that adds a domain group as member of a local group: http://technet.microsoft.com/en-us/library/bb490706.aspx
If you have manually added a domain security group to local Administrators group of a computer and you still see that the members are not admins then you can do the following:
Logoff and logon again and see if that helps
If you are using a universal group then you be having a problem with the membership. More details here: http://www.windowsdevcenter.com/pub/a/windows/2004/06/15/fsmo.html. You can try converting the group to a global one for testing.
Adding a user to Domain Admins group will make you, by default, a local administrator on domain-joined Windows Systems. This is because, domain admins are, by default, members of local Administrators group. However, you should make the membership of Domain
Admins group very limited and only for users who do global domain administration.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Powrshell to add Multiple security groups to shares

Um, are you adding the security groups to the share? That makes no sense. You should just add "everyone, full" to the share permissions and then use NTFS permissions to limit what people can actually do.
If you really need that I'll go look some more but I won't promise anythign as, again, this is not the way epople generally do this. This code is 1 possible way of managing the NTFS permissions, from some code I collected :)
Powershell

Hi People,IVe been using SW for sometime as a bit of a Lurk, Im scratching my head now at something that seems so basic but i cannot for the life of me figure it out, so any help would be great.ScernarioWe currently have a Powershell script that creates a list of folders on a Path that you give it, it will then proceed to add the security groups to the shares, this creating about 250 SG for the share - not too sure why this is used as its a pretty bad way to do thing.What i need to do is create a script that will ask for a list of security groups to add to a folder, I have already created the script to add the folders and add certain domain admin groups to the folders, the problem i am having is the name of the groupsSo for instance we have one call SG COMPANYNAME C - This is the change group allowing users to change files etc, we have...
This topic first appeared in the Spiceworks Community

Add AD security group to collection

Dear Exprt,
i have added AD security group to collection via Add resource but nothing receive by client its user base group.
how can i configure correctly.
note: i dont want query base what i am try is add security DL to collection for software deployment
[email protected]

Sorry - this is the same for 2007. You cannot import distribution lists. You can create a security group in AD and nest the DL into. Then add the security group into the collection with a direct rule.
Cheers
Paul | sccmentor.wordpress.com

Want to add new material group plz where I can Add it

Dear experts I want to add material group can you help where I can add it. The material groups are saved in table T0123 . This table is having view also can I enter the value in View or I have to go to SPRO to add new material group. plz help me as I am new. What is the right procedure to add material

Hi Shilpa,
u need to confugure the material group in SPRo
path: sapro>logistic general->setting for key fieds>define material group
T.code:OMSF
here click on new entries add ur 4 character material group with description as per ur requirement.
Regards,
Gopala.S

Add new payment group to order.

I want to add extra payment group to order.I can use order.addpaymentgroup and addrelationship.is this right approach?
I read somewhere it's not good approach to add relationship this way.
Please ssuggest how can i add new payment group to order.

You dont need to create the relationship explicitly. OrderManager, PaymentGroupManager, CommerceItemManager etc gives some method to support split payment groups and that will create the relationship.
For example, in case if you want to use half of the order amount to one Payment Group called PG1 and remaining to PG2, you can use the below approach.
OrderManager.addOrderAmountToPaymentGroup(Order, PG1.id (payment group id), amount), this method will create a relationship and assign the amount to that payment group.
Next, you need to set the remaining amount to PG2,
OrderManager.addRemainingItemAmountToPaymentGroup(Order, PG2.id), this will add the remaining amount to PG2 and create the relationship.
Similiar methods are available in the manager classes mentioned above, check API docs for details.
Cheers
R

Creating New Security group and Refreshing Security Filters

Hi
I have created a new security group (and added people to it)
I have given this security group write access to certain dimension members within the planning application
I have refreshed the security filters via Planning_Manage Database_Security Filters
But the people in the new security group still dont have write access to the dimension members
If I look in EAS ... I cant see the the new security group that I have created
Question 1
Do I need to refresh the security filters via EAS
If I do this ... I know that I need to make sure that no one is in the Essbase application
Do I also need to make sure that no one is within the relavent planning application?
Question 2
Is it enough to refresh the security filters (tick security filters) .. or Do I need to tick database in the manage database options
Question 3
Does anyone have any suggestions that I havent mentioned above?
Thank you
PD

Hi John
Thanks for your suggestion
I tried this and He still doesnt have write access
He doesnt need to be able to lock and send values via essbase ... However when we are in planning, He cant submit data to the dimension members mentioned above.. i.e the cells are all green
I have checked and doubled check the security on the dimension members (and form security) in the form that he cant edit
Do you have any other suggestions?
Thank you
PD

How to create a new security group and assignments of rigths?

Hi,
In our current "Cisco Unified CM Administration System version: 7.0.1.11000-2" installation, we are a couple of administrators using the same user account to logon to the "https://10.10.x.x/ccmadmin/showHome.do" homepage.
Where can I create a new user group and assign the appropriate rights to the group, and add users to the group? Or is it another approach that I need to follow instead of the way that security rights a made in a Microsoft Active Directory?
Is there any place that I can read or view examples on how the setup can be done? I would like to have it in the way that everyone has their personal user account and use this to logon the administration-web page instead of an account that everyone uses.
Kind regards,
Carl-Marius

why do you need to create a new business group? To implement HR? If so, linking a HR responsibility to your user, is one of the few steps to go anyway.
How you did it on the test environment?
Why not link a hr resp to your user temporarily, and disable it later.
I'm always afraid to answer this kind of questions, since the real requirement is not described.

Cannot add new LDAP Group Members in Sun Java Server 7.0

Hello!
I've got Sun Java™ System Web Server 7.0 installed and Apache Directory Server as LDAP server.
So, the task is -to create/add users to a group (just created or already existent).
When I try to do that, I got only "An error has occured" message and that's all.
What really happens, I cannot understand even from server logs:
here is the screenshot - http://tinyurl.com/34xuw42
and the log:
[08/Dec/2010:16:44:03] info ( 8504): for host 127.0.0.1 trying to POST /admingui/admingui/editGroupDialog, service-j2ee reports:
java.lang.NullPointerException
     at com.sun.web.admin.configlib.LdapDatabase.isUserGroupMgmtSupported(LdapDatabase.java:161)
     at com.sun.web.admin.mbeans.UserGroupMBean.isUserGroupMgmtSupported(UserGroupMBean.java:244)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.sun.web.admin.mbeans.BaseAdminMBean.invoke(BaseAdminMBean.java:49)
     at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:836)
     at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:761)
     at com.sun.web.admin.gui.util.MBeanUtil.invoke(MBeanUtil.java:139)
     at com.sun.web.admin.gui.util.MBeanUtil.invoke(MBeanUtil.java:39)
     at com.sun.web.admin.gui.handlers.CommonHandlers.invokeMBean(CommonHandlers.java:66)
     at com.sun.web.admin.gui.handlers.CommonHandlers.invokeWizardMBean(CommonHandlers.java:170)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.sun.enterprise.tools.guiframework.view.DescriptorViewHelper.invokeHandler(DescriptorViewHelper.java:938)
     at com.sun.enterprise.tools.guiframework.view.DescriptorViewHelper.invokeHandlers(DescriptorViewHelper.java:875)
     at com.sun.enterprise.tools.guiframework.view.DescriptorViewHelper.dispatchEvent(DescriptorViewHelper.java:841)
     at com.sun.enterprise.tools.guiframework.view.DescriptorViewHelper.beginChildDisplay(DescriptorViewHelper.java:477)
     at com.sun.enterprise.tools.guiframework.view.DescriptorViewBeanBase.beginChildDisplay(DescriptorViewBeanBase.java:168)
     at com.iplanet.jato.taglib.TagBase.fireBeginDisplayEvent(TagBase.java:133)
     at com.sun.web.ui.taglib.common.CCTagBase.fireBeginDisplayEvent(CCTagBase.java:149)
     at com.sun.web.ui.taglib.common.CCTagBase.doEndTag(CCTagBase.java:108)
     at org.apache.jsp.jsp.addGroupMembers_jsp._jspx_meth_cc_propertysheet_0(addGroupMembers_jsp.java:347)
     at org.apache.jsp.jsp.addGroupMembers_jsp._jspx_meth_cc_pagetitle_0(addGroupMembers_jsp.java:317)
     at org.apache.jsp.jsp.addGroupMembers_jsp._jspx_meth_cc_form_0(addGroupMembers_jsp.java:201)
     at org.apache.jsp.jsp.addGroupMembers_jsp._jspx_meth_cc_header_0(addGroupMembers_jsp.java:154)
     at org.apache.jsp.jsp.addGroupMembers_jsp._jspService(addGroupMembers_jsp.java:99)
     at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:80)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:917)
     at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:373)
     at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:457)
     at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:351)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:917)
     at org.apache.catalina.core.ApplicationFilterChain.servletService(ApplicationFilterChain.java:398)
     at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:792)
     at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:472)
     at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:353)
     at com.iplanet.jato.view.ViewBeanBase.forward(ViewBeanBase.java:340)
     at com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:261)
     at com.sun.enterprise.tools.guiframework.view.DescriptorViewHelper.execute(DescriptorViewHelper.java:338)
     at com.sun.enterprise.tools.guiframework.view.DescriptorViewBeanBase.execute(DescriptorViewBeanBase.java:210)
     at com.iplanet.jato.view.RequestHandlingViewBase.handleRequest(RequestHandlingViewBase.java:308)
What I am doing wrong?
Please, help.

You can configure a LDAP authentication database. Once you have configured it, you will be able to see users and groups contained in the configured ldap store.
Select a web instance configuration and select the Access Control tab. Under the Authentication Database sub tab create a new Authentication Database and select as database type LDAP Server. Make sure you provide as a bind dn a user that has sufficient permissions to read user and group entries.
Once that is done and you applied the changes, you will be able to select your LDAP server as an Authentication Database under the Users and Groups sub tabs.

OMJJ - add new account grouping for transaction type

Hi
How can I add anew combination of movement type and special stock indicator, that don't exist in our system.
How can I add a line to OMJJ account grouping table?
Is it dependant on something else?
Thanks
Liat

Hi Liat, if you want to create a new movement type, you go to transaction OMJJ, select movement type, put in field from movement type that you want to copy and in field to movement type that you want to create, you copy all entries and on Update control... tab you can put special stock indicator.
Please review this
I hope this information help you
Rose

Add new instrument group/category?

I'm working on composing for a video game project, and for the music I've set up a bunch of my own instrument presets. I'd like to create a new group/category for these presets. For example, there is "Bass", "Drum Kits", "Guitars", etc. I'd like one titled "The Game" for example. That way I don't have to jump around between categories to find/edit the game's instruments. It would save a LOT of time. How do I go about doing this?
Thanks for any advice!!

Go into the folder HD/Library/Application Support/GarageBand/Instrument Library/Track Settings/Software. There you see the folder with the categories. (Or in the respective folder in your User directory.)
You should be able to create new folders there and put your self-created .cst files into them. Be careful with everything you do in the Instrument Library - it is not meant to be maniputlated manually, so you might confuse GB!

File Server Migration - For ORG A Forest to ORG B Forest ( Need to create and Map Security Group automatically on new Migrated Folders - Please Help

I have two forest With Trust works Fine .
I have file server in ORG – A ( Forest ) with 2003 R2 Standard
I have a File server in ORG - B ( Forest ) With Windows server 2012 ( New Server for Migration )
I have 1000 + folders with each different permission sets on ORG-A. We are using Security groups for providing permission on the share Folders on ORG A
I need to Migrate all the folders from ORG – A to ORG – B.
I am looking for an automated method of creating Security Groups on AD during the Migration, Once the Migration is Done, I can add the required users to the security groups manually.
Example.
Folder 1 on ORG – A has Security Group Called SEC-FOLDER1-ORGA
I need an automated method of Copying the files to ORG – B and Creating a new security Groups on ORG –B Forest with the same permission on parent and child Folders. I shall Add the users manually to the Group.
Output Looks Like
Folder 1 on ORG – B has Permission called SEC-FOLDER1-ORGB ( New Security Group )
Also I need a summarized report of security Group Mapping, Example – Which security Group on ORGA is mapped with Security Group Of ORGB

Hi,
I think you can try ADMT to migrate your user group to target domain/forest first. Once user groups are migrated, you can use Robocopy to copy files with permission - that permission will continue be recognized in new domain as you migrated already.
Migrate Universal Groups
http://technet.microsoft.com/en-us/library/cc974367(v=ws.10).aspx
If you have any feedback on our support, please send to [email protected]

Trying to use a task sequence to add a computer to a security group

I am using the following code to try to add a security group to a computer account when I am imaging using MDT 2012. I get the following errors after the imaging process has completed.
Any help would be greatly appreciated.
Thanks,
Andy
Exception calling "InvokeMember" with "5" argument(s): "Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))"
TaskSequencePSHost 03/24/2015 8:45:29 AM
0 (0x0000)
At \\AOTWDS01V\DeploymentShare$\Scripts\dagroup.ps1:26 char:2
+ $UserDN = $SysInfo.GetType().InvokeMember("ComputerName", "GetProperty", $Null, ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
TaskSequencePSHost 03/24/2015 8:45:29 AM
0 (0x0000)
NotSpecified: (:) [], MethodInvocationException
TaskSequencePSHost 03/24/2015 8:45:29 AM
0 (0x0000)
The following exception occurred while retrieving member "Get": "The specified domain either does not exist or could not be contacted.
" TaskSequencePSHost
03/24/2015 8:45:31 AM 0 (0x0000)
At \\AOTWDS01V\DeploymentShare$\Scripts\dagroup.ps1:30 char:2
+ $strDomainPath = $ORoot.Get("defaultNamingContext")
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
TaskSequencePSHost 03/24/2015 8:45:31 AM
0 (0x0000)
NotSpecified: (:) [], ExtendedTypeSystemException
TaskSequencePSHost 03/24/2015 8:45:31 AM
0 (0x0000)
Exception calling "Execute" with "1" argument(s): "An invalid directory pathname was passed
" TaskSequencePSHost
03/24/2015 8:45:32 AM 0 (0x0000)
At \\AOTWDS01V\DeploymentShare$\Scripts\dagroup.ps1:38 char:3
+ $oRs = $oConnection.Execute("SELECT adspath FROM 'LDAP://$strDomainPath' WHERE ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
TaskSequencePSHost 03/24/2015 8:45:32 AM
0 (0x0000)
NotSpecified: (:) [], MethodInvocationException
TaskSequencePSHost 03/24/2015 8:45:32 AM
0 (0x0000)
Param(
[string[]]$GroupNames,
[String]$Admin,
[String]$Password
if($GroupNames)
[int] $ADS_PROPERTY_APPEND = 3
#Get the computer DN
$SysInfo = New-Object -ComObject "ADSystemInfo"
$UserDN = $SysInfo.GetType().InvokeMember("ComputerName", "GetProperty", $Null, $SysInfo, $Null)
$ComputerDN = "LDAP://$UserDN"
#Get the Domain DN
$ORoot = [ADSI]"LDAP://rootDSE"
$strDomainPath = $ORoot.Get("defaultNamingContext")
#Create ADODB connection
$oConnection = New-Object -ComObject "ADODB.Connection"
$oConnection.Provider= "ADsDSOObject"
$oConnection.Open("Active Directory Provider")
foreach($groupname in $GroupNames)
#Get the specefied group
$oRs = $oConnection.Execute("SELECT adspath FROM 'LDAP://$strDomainPath' WHERE objectCategory='group' AND Name='$groupname'")
If (!$oRs.EOF)
$strAdsPath = ($oRs.Fields | Select value ).value
If($strAdsPath)
If($Admin -and $Password)
$objGroup = New-Object DirectoryServices.DirectoryEntry($strAdsPath,$Admin,$Password)
Else
$objGroup = [ADSI]$strAdsPath
$objComputer = [ADSI]$ComputerDN
#verify if the computer is a member of the Group
If ($objGroup.ismember($objComputer.adspath) -eq $false)
#Add the the computer to the specefied group
$objGroup.PutEx($ADS_PROPERTY_APPEND,"member",@("$UserDN"))
$objGroup.setinfo()

If you are using UserID UserDomain UserPassword those variables are base64 encoded. You could decode them via something similar to this:
https://social.technet.microsoft.com/Forums/en-US/6c11827f-982d-4fa1-a76d-70a615912d62/mdt-2012-automation-example-of-how-to-use-userdomainuserid-userpassword-in-a-script-move-ou?forum=mdt
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Copy existing security group to new

Hi all,
Need some help to do the following:
I have created a new security group and would like to import users from existing Distribution group (but leave this DL as is).
thats it and thanks!
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Off2work

Hi,
You can try something like this:
Add-ADGroupMember -Identity 'New Group Name' -Members (Get-ADGroupMember -Identity 'Old Group Name') -WhatIf
http://technet.microsoft.com/en-us/library/ee617210.aspx
Don't retire TechNet! -
(Don't give up yet - 13,085+ strong and growing)

Add new Security Groups

Similar Messages

Maybe you are looking for