Dynamic Access Control from PowerShell

Hi Guys
Please I need your help, I am working with AD Dynamics Access Control (AD DAC) and Windows Powershell (PS), the Idea is create a menu for AD DAC in PS, Everything is OK but I have a problem when I create a new ClaimType, because from AD DAC
windows Menu you can select an AD Attribute and there is a Column naming "Value Type" , but in my Script I Don't know how to get this to show in OUT-GridView, I dont know what is the correct property.
My Code:
Get-ADObject -SearchBase ((Get-AdRootDSE).SchemaNamingContext) -SearchScope 1 -filter * -Property name, Ldapdisplayname | out-gridview -outputmode Single
Sorry But I can't put my image here
Thanks in advance

Hi,
Change the -Property parameter to a wildcard and check the output. Once you know what property you need (assuming it is actually listed), you can add it to your current list.
As for posting screenshots, you'll need to post in the current verification thread stuck at the top of this forum here:
https://social.technet.microsoft.com/Forums/en-US/home?forum=reportabug
Don't retire TechNet! -
(Don't give up yet - 13,085+ strong and growing)

Similar Messages

Dynamic Access Control : Suggested Value Claim

Currently studying for my 70-417 Exam, there's one thing i don't fully understand and can't find any resources that explain it.
A claim type can be created, from what I understand the "suggested values" are optional, these can remain empty like for example the department resource property.
But why is there an suggested value option for the department?

Hi,
When we create a new claim type, in the Suggested Values section, click No values are suggested.
But search for the department attribute in the Filter box and make sure that the
department string is highlighted in the results. Add Finance and
HR as suggested values.
You could refer to:
http://www.petri.com/dynamic-access-control-dac-kerberos-claim-types-resource-properties.htm
Step-by-Step: Protecting your information with Dynamic Access Controlhttp://blogs.technet.com/b/canitpro/archive/2013/05/07/step-by-step-protecting-your-information-with-dynamic-access-control.aspx
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Email access query from powershell

I am trying to utilise the DoCmd.SendObject command, from powershell... I have the script launch the required database but I cannot get it to export the query information into Xl format and email it...
This ran the macro that I had produced in Access but I was then required to manually click on an Outlook warning box so it has not resolved the issues.
I just need to get this query data out of access either to save it locally and then send it via email or send it automatically...
Does anyone have any experience of this?
Your help will be most appreciated!
Regards
Richard

Hi Richard,
If you want to export the access query to excel format and send the excel report, have you tried the
DoCmd.OutputTo
Method, please also note I haven't tested
$db = New-Object -ComObject Access.Application
$db.OpenCurrentDatabase("foo.accdb")
$db.DoCmd.OutputTo(1,"The_Report","YourQueryName", "Excel Workbook (*.xlsx)", , True)
Refer to:
Powershell Interaction with Access 2007, how to Save Report as PDF?
DoCmd.OutputTo in xlsx (Excel 2007+) Format
If there is anything else regarding this issue, please feel free to post back.
Best Regards,
Anna Wang

Writing a table to a MS Access database from Powershell

Hey guys, me again...I'm trying to wrap up a project here and i have a powershell app writing to a SQL database just fine. The last piece is writing to a MS Access database table. For the life of me i cannot find anything out there that really points me
in the right direction.
I know my database name/path and i know the table/headers i need to write my data too.
Anyone have a link to a quick dirty tutorial or can someone point me in the right direction ?
Thanks as always
Rich
Rich Thompson

I get no error message. I created a blank database with a table called dbo_so_shprimg_pvs and headers
called so_hdr_key, so_ship_key, imgfileName, so_shprimg_crtdt. I'm doing a test write-host
prior so i know my variables are good.
Rich
Rich Thompson

Exercise 8, Ch Access Control from Thinking in Java

I am learning java using Bruce Eckel book "Thinking in Java" 4th edition and I got stuck on one exercise:
.. create a class called ConnectionManager that manages a fixed array of Connection objects. The client programmer must not be able to explicitely cteate Connection objects, but can only get them via a static method in ConnectionManager. When the ConnectionManager runs out of objects, it returns a null reference."
So, as I understand client programmer should be able to use Connection object meaning the class is public, but cannot create one. Creating Connection objects is granted only to ConnectionManager. How to permit creating objects only to an object of certain type?
serezha.

Hi Peter,
the point to look at is the Product Availability Matrix under service.sap.com/pam
There max NW 7.0 EHP1 is supported for the java platform.
Only thing you could do is to open an OSS message to clarify if and when it will be supported.
Best,
Frank

Create dynamic controls from JSON Response

I have a requirement to create a group of checkbox with lebels in a page from JSON response.
The JSON response is
    "data": [
            "CodeStatus": "Red"
            "CodeStatus": "Orange"
            "CodeStatus": "Green"
            "CodeStatus": "Yellow"
the design is:
the box is vertically scrollable, as it can have more color codes.
Can anyone suggest how to design the above?
If one can provide the implemantation code, that would be very good as I have very time to implement it.

Have a look at templates and for more complex scenarios factory functions, which give you the ability to dynamically create controls from model data.
SAPUI5 SDK - Demo Kit
Regards,
Jason

Can not get access files from Windows 7 to Claims-based file authorization share

We have AD level 2012R2, DCs running 2012R2 of course, and we have clustered File Server (3 FSNodes running 2012R2).
We enabled 2 policies
KDC Support for claim
Kerberos support for claim
We created 1 claim type in ADAC (For example "Division" Source Property). Filled this property to all IT AD Accounts by our value "IT"
On FS made a share folder ITDivision:
- set permissions Domain Users can Modify if User.Division equals "IT"
so on Windows 8 IT Users can access files on this share and on Windows 7 they cant
=\ . We know from many presentations about Dynamic Access Control that File Server must enroll user claims if client do not support this claims (Service-for-User-To-Self)

Hi,
>>so on Windows 8 IT Users can access files on this share and on Windows 7 they cant
=\ . We know from many presentations about Dynamic Access Control that File Server must enroll user claims if client do not support this claims (Service-for-User-To-Self)
How is it going? Was there any error message? As far as I know, Dynamic Access Control (DAC) should work for downlevel clients. It’s backwards compatible. As Florain explains in the following blog:
For non-Windows 8 and non-Windows Server 2012 boxes accessing DAC-protected file shares, the users do not carry any claims. For them, the Server 2012-based file share will query Active Directory and proxy the claims request to figure out what claims
the user and machine bring. The file server checks in the name of the user, whether they should have claims. With that information, the file server evaluates the access to the file share. So yeah – DAC works for downlevel clients, too. It’s backwards compatible.
And totally transparent to Windows 7.
Questions regarding Dynamic Access Control (FAQ)
http://www.frickelsoft.net/blog/?p=293
In addition, regarding dynamic access control, the following blog can also be referred to for more information.
Dynamic Access Control in Windows Server 2012
http://www.infoq.com/news/2012/10/Dynamic-Access-Control
Please Note: Since the above two website are not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Best regards,
Frank Shen

EJB and access controll???

Hi all,
I have a question about access control via EJB,
For example I have a client app�ication and on start I will prompt user for user name and password, and now what to do with this information how to pas it to the ejb server, or??? Or may be some of you have any link to tutorial as an answer? My EJB will access database and I want to use the access control from database.
Thank you in advance.

Hi Eshwa,
thank you for your reply, I found a nice developer guide on the link that you give me, but I steal have a problem with undestanding of practical way to pas user information from client application to ejb server, may be you can give mi a pice of code or an small example, where is geted 2 String (user name and password) and sent to the ejb server to be autentificated, and then to have acces to the resources that is accessable for this user (discribed in the deployment description user - role).
Anyway thank you again.
Best regards Alexander Hincu .

Proplem: Access HTMLB controls from java code

Hi,
I am new to iView development for EP6. So my problem should be easy to solve (for you ).
I created in the NW Dev Studio a JSP DynPage.
The following files were created or edited:
1.     JSP file (created)
2.     java file (created)
3.     portalapp.xml (edited)
In order to make the page running (proccessing) I changed the following things:
1.     JSP file Add taglib reference to HTMLB-class
2.     portalapp.xml Remove the native property so the JSP file will not be accessed directly.
Now I want to do the following:
On the JSP page I placed severeal HTMLB controls (textViews).
From the java code I try to access these controls in the doProcessBeforeOutput method and change/set values.
But I get all the time a null-Exception.
Code (JSP)
<%-- mcmsprovider.jsp --%>
<%@ taglib uri= "tagLib" prefix="hbj" %>
<hbj:content id="cntMcmsProvider" >
<hbj:page title="MCMS Provider Dynpage">
   <hbj:form id="frmMcmsProvider" >
             <hbj:textView id="tvwScript" encode="false"></hbj:textView>
             <hbj:textView id="tvwStyle" encode="false"></hbj:textView>
   </hbj:form>
</hbj:page>
</hbj:content>
Code (JAVA):
public void doProcessBeforeOutput() throws PageException {
       this.setJspName("mcmsprovider.jsp");
       TextView tvw = (TextView) this.getComponentByName("tvwStyle");
       tvw.setText("Here the dynamic text");
I also tried to add raw text to the form but also null excpetion:
public void doProcessBeforeOutput() throws PageException {
       this.setJspName("mcmsprovider.jsp");
       Form frmCurrent = (Form) this.getForm();
       frmCurrent.addRawText("<h3>This comes from here</h3>");
My goal is to dynamically add controls to the form, but until now I think it will be a dream:
public void doProcessBeforeOutput() throws PageException {
       this.setJspName("mcmsprovider.jsp");
Form form = (Form)this.getForm();
       TextView tvw = new TextView("tvwDynamic");
       tvw.setText("Here the dynamic control");
       form.addComponent(tvw);
The normal page processing runs:
public void doProcessBeforeOutput() throws PageException {
       this.setJspName("mcmsprovider.jsp");
Any help is greatly appreciated.

Eike
Here is the example straight from the PDK documentation. This should help you a little
UsingAbstractPortalComponentWithHTMLB.java
import com.sapportals.htmlb.*;
import com.sapportals.htmlb.enum.DataType;
import com.sapportals.htmlb.enum.GroupDesign;
import com.sapportals.htmlb.event.Event;
import com.sapportals.htmlb.rendering.IPageContext;
import com.sapportals.htmlb.rendering.PageContextFactory;
import com.sapportals.portal.prt.component.AbstractPortalComponent;
import com.sapportals.portal.prt.component.IPortalComponentRequest;
import com.sapportals.portal.prt.component.IPortalComponentResponse;
public class UsingAbstractPortalComponentWithHTMLB extends AbstractPortalComponent {
    //Fill in your output for "normal" content creation mode here
    protected void doContent(IPortalComponentRequest request, IPortalComponentResponse response) {
        IPageContext myContext = PageContextFactory.createPageContext(request, response);
        if (myContext == null) {
            System.out.println("htmlb service did not start up as expected.");
        Form myForm = myContext.createFormDocument("First Experiment");
        Event lastEvent = myContext.getCurrentEvent();
        Group myGroup = new Group();
        myGroup.setWidth("350");
        myGroup.setTitle("First Experiment");
        myGroup.setDesign(GroupDesign.SAPCOLOR);
        myForm.addComponent(myGroup);
        GridLayout gl = new GridLayout();
        myGroup.addComponent(gl);
        if ((lastEvent != null) && (lastEvent.getComponentName().equals("submit"))) {
            String name = myContext.getDataForComponentId("USER_NAME").toString();
            TextView label = new TextView("Hi, " + name);
            gl.addComponent(1, 1, label);
            Button myButton = new Button("goback", "Go back");
            myButton.setOnClick("goBack"); // ignored anyway
            gl.addComponent(2, 1, myButton);
        } else {
            TextView label = new TextView("What's your name?");
            gl.addComponent(1, 1, label);
            InputField inf = new InputField("USER_NAME");
            inf.setType(DataType.STRING);
            gl.addComponent(1, 2, inf);
            Button myButton = new Button("submit", "Tell");
            myButton.setOnClick("submit");
            gl.addComponent(2, 2, myButton);
        myContext.render();

Not able to access SOAP web service data control from adf mobile

Hi,
I am trying to call web services from adf mobile..
I have created data control from external web service and it is perfectlly working on web browser..
But why it is showing an error on emulator??
Is there any .jar file missing in adf mobile so that it is not supporting a web service?
Or is there any other problem? Emulator is connected to network and I am able to run WSDL in emulator's browser..
Please help me to solve this issue..
Thanks,
Laxmi

Emulator is connected to network and I am able to run WSDL in emulator's browser..
Connecting to WSDL in the browser is not the same as connecting to WSDL in an application.
To access a web service from an Android device enable a permission in AndroidManifest.xml that allows applications to open network sockets. Add the following uses-permission element.
<uses-permission android:name="android.permission.INTERNET"></uses-permission>

Can i do a remote desktop from my 2007 iMac(computer that I need to access) controlled by my 2010 mbp

i don't have a wireless keyboard or mouse for my 2007 iMac, is there any way that can use remote desktop and access it from my 2010mbp.

Hi champrider,
You can use an application such as Apple Remote Desktop to control your iMac remotely. See this article -
OS X Mavericks: Allow access using Apple Remote Desktop
This help page will provide you with some other useful resources for Apple Remote Desktop -
Remote Desktop Help
Thanks for using Apple Support Communities.
Best,
Brett L

Access Control up grade from 5.2 to 5.3

Hi,
One of my client have
1. Earlier Access control 5.2 was installed but only FF are configured and is in use.
2. After some time Access Control GRC 5.2 server (front end) have some problem so they have
installed 5.3 to front end level
--no back end patch was updated
--no connector are created.
Now the situation is as follows
Front end -access control 5.3 -
Back end -RTA is access control 5.2(they are only using FF)
No connector are created
From this situation how can we take it forward to access control 5.3.
I have following question
1. can we update back end to 5.3 and start configuration --what is the impact?
2. Do we need to take back up of table FF as client is using only FF.
Thanks,
Digambar

Hi
5.2 RTA will not be compatible with with GRC 5.3 RTA .
So best would ne to upgrade your backend RTA to 5.3 and SP level shoul;d be in Synch with level of SP of front end i.e SA P GRC 5.3 .
Thanks & Regards
Asheesh

Dynamic Tab Access Control?

Is there a way to set up dynamic tab access control? For instance if I wanted a professor to only have Shared access to a particular tab in a course page is there a way to define the credential to indicate which tab they should have access to?
Thanks,
Jason

Is there a way to set up dynamic tab access control?
For instance if I wanted a professor to only have
Shared access to a particular tab in a course page
is there a way to define the credential to indicate
which tab they should have access to?
I haven't tried this, but I think you could create a new course template that uses the instructor and student roles, and set the access control option in that to allow an instructor shared access to a given tab. New courses based on that template would use the same permissions. I don't think there's any need to include access control information in the credential itself (as the credential is just used for authentication; iTunes U itself decides what you get to).
Or am I missing something in your question?
Ken

401 Unauthorized Error when accessing a task from REST API which contains Role or Privilege in Access Control definition

Hi Team,
As of IDM 7.2 SP8 patch2, when we use Enterprise role or Privilege in the access control definition of a task, accessing this task from UI5 i.e REST API is giving unauthorized error even though user is already having the required role or privilege.
But the task is working fine if we use fixed user ID or keeping blank value in allowed users field.
Attached the current access control definition of the task we configured & the error message info for reference
Regards,
Venkata Bavirisetty

Hi Ralitsa,
Thanks for your response and sorry for late reply.
The XXXX in role is not used as a wild card. the name itself is in that format. I have searched the role and then selected from search list.
Let me know if you need any clarifications?
Refards,
Venkata Bavirisetty

Impersonate user when accessing Microsoft SQL Server from powershell using Windows Authentication

Hi All,
Below is the powershell script to connect a SQL DB using windows authentication by impersonating a user. The user should have login access to the server. Script can be highly useful when service id is used to access DB using powershell.
[reflection.assembly]::LoadWithPartialName("Microsoft.SqlServer.Smo") | Out-Null
$ds=$null
$conn = New-Object -typeName Microsoft.SqlServer.Management.Smo.Server -argumentList "Servername"
$db = New-Object Microsoft.SqlServer.Management.Smo.Database
$conn.ConnectionContext.ConnectAsUser = $true
$conn.ConnectionContext.LoginSecure=$true
$conn.ConnectionContext.ConnectAsUserName = "username"
$conn.ConnectionContext.ConnectAsUserPassword ="password
$conn.Loginmode
$db = $conn.Databases.Item("dbname")
$ds = $db.ExecuteWithResults("select top 10 Name from Tablename")
Foreach ($t in $ds.Tables)
Foreach ($r in $t.Rows)
Foreach ($c in $t.Columns)
Write-Host $c.ColumnName "=" $r.Item($c)

That is OK when you want to manage the instance biut it wojn't work if the tools are not installed.
This works from anywhere all of the time and is simpler:
$datasource='MyServerInstance'
$database='NorthWind'
$connStr='Data Source={0}; Database={1}; Trusted_Connection=True;' -f '$datasource,$database
$conn=New-Object System.Data.SQlClient.SQlConnection($connStr)
$conn.Open()
$cmd=$conn.CreateCommand()
$cmd.CommandText='select * from products'
$rdr=$cmd.ExecuteReader()
0..($rdr.FieldCount-1) | %{$rdr.GetName($_)}
$conn.Close()
If you want credentials just add them.
$connStr='Data Source={0}; Database={1}; Trusted_Connection=True;UID={2};PWD={3};' -f $datasource,$database,uid,$pwd
¯\_(ツ)_/¯

Dynamic Access Control from PowerShell

Similar Messages

Maybe you are looking for