Script to edit 'isCriticalSystemObject' attribute

Is it possible to write a script to set an OU that contains security groups' attribute 'isCriticalSystemObject' to true?
Sean

In AD DS, the following attributes are disallowed in a Modify for an object of class user:
badPasswordTime,
badPwdCount,
dBCSPwd, isCriticalSystemObject,
lastLogoff,
lastLogon, lastLogonTimestamp,
lmPwdHistory,
logonCount,
memberOf, msDS-User-Account-Control-Computed,
ntPwdHistory,
objectSid,
rid, sAMAccountType, and
supplementalCredentials. If one of these attributes is specified in a Modify, the Modify returns
unwillingToPerform / ERROR_DS_ATTRIBUTE_OWNED_BY_SAM.
In AD DS, the following attributes are disallowed in a Modify for an object of class group: isCriticalSystemObject, memberOf, objectSid, rid, sAMAccountType, and userPassword. If one of these attributes is specified in a Modify, the Modify returns
unwillingToPerform / ERROR_DS_ATTRIBUTE_OWNED_BY_SAM.
From: http://msdn.microsoft.com/en-us/library/cc223462.aspx
¯\_(ツ)_/¯

Similar Messages

As3 script to edit sound files -

A wav or mp3 file will be taped or various. Is there any script to edit these files in batch ie: to Trim the beginnings ie: no sound parts. Or would I have to use a sound editor. As I say I don't want to do it manually. This sounds like a stupid use but it's important as I have children taping themselves and can't use a 3 party product to edit. Perhaps AIR has something in an API.
Cheers

Can this be done with differing lengths of white spaces ie: Does the class detect where the white space is and how long it is or do I have to tell it which means it's no good to me.

Script to edit conf files: suggestions & comment sought

I have this script to edit conf files in $XDG_CONFIG_HOME. It works fine:
#!/bin/sh
dir=$XDG_CONFIG_HOME/$1
if [ -d "$dir" ]; then
for f in $dir/* ; do
file=${f##*/}
case $file in
*conf | config | *.cfg | *rc) $EDITOR "$f" ;;
esac
done
fi
It has already been pointed out that this could easily be achieved in Bash 4 with:
#!/bin/bash
shopt -s extglob failglob
$EDITOR ~/.config/$1/@(conf|config|*.cfg|*rc)
The shortcoming with my script is that it only handles files correctly placed in $XDG_CONFIG_HOME, and as many apps litter thier conf files about the shop, I wanted to try something that dealt with those cases. Hence this.
#!/bin/sh
dirs=($HOME/.$1* $HOME/.$1/ $XDG_CONFIG_HOME/$1/)
search=$(find "${dirs[@]}" -type f $ -name "*.conf" -o -name "conf" -o -name \
"config" -o -name "*rc" -o -name "*.cfg" $ 2>/dev/null )
for f in $search; do
$EDITOR "$f"
done
...which again works, but seems pretty ugly.
I'd appreciate any comments on approaches to the same problem that achieve the result in a more efficient and portable way.
Last edited by jasonwryan (2011-10-18 02:53:06)

Instead of:
search=$(find "${dirs[@]}" -type f $ -name "*.conf" -o -name "conf" -o -name \
"config" -o -name "*rc" -o -name "*.cfg" $ 2>/dev/null )
You should either read the results into an array and act on the array, or launch the editor straight from find via exec.
Using an array:
IFS=$'\n' read -r -d '' -a files < \
<(find "${dirs[@]}" -type f $ -name "*.conf" -o -name "conf" -o -name "config" -o -name "*rc" -o -name "*.cfg" $ 2>/dev/null
(( ${#files[*]} )) && "$EDITOR" "${files[@]}"
Usind only find:
find "${dirs[@]}" -type f $ -name "*.conf" -o -name "conf" -o -name "config" -o -name "*rc" -o -name "*.cfg" $ -exec "$EDITOR" {} +
I prefer the second method -- its right to the point and isn't shell specific. It is, however, somewhat GNU find specific.

Create/Edit "Custom Attributes" in Dynamic Distribution Groups

Hi,
I wanna create a Dynamic Distribution Group based on the users "title" and "company".
I've noticed that there are 15 "Custom Attributes" that I can edit in someway, I guess via PowerShell?
So what is the easiest way to accomplice this?

Hi,
Agree with the above suggestion, you can also bulk change the custom attributes:
Get-Mailbox -ResultSize Unlimited -Database Execs | Set-Mailbox -CustomAttribute1 “title”
http://dougg.co.nz/2012/05/01/bulk-setting-exchange-2010-custom-attributes/
to Edit Custom Attributes：
get-mailbox -filter {customattribute1 -eq ""} | set-mailbox -customattribute1 = "<value>"
And here is a reference about Create/Edit "Custom Attributes" in Dynamic Distribution Groups：
http://windowsitpro.com/exchange-server-2010/exchange-2010-sp2-value-custom-attributes
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make
sure that you completely understand the risk before retrieving any suggestions from the above link.
Best regards,
Angela Shi
TechNet Community Support

Repeating Regions and Editable Tag Attributes?

I want to produce a template that will let users create pages
that list items as a thumbnail image and a short text description,
one after the other.
I can set this up as a repeating region, but I would also
like to make only certain attributes of the image editable (src and
alt for example). However, when I use editable tag attributes to do
this, the image in each repeated region ends up with the same
attribute values - when I add a new repeat region and then change
the src tag through the Template Properties dialog,
all of the images take on the same src value. Looking at the
code, it looks like the editable instances in each repeated region
get the same name, and so I can see that DW will get confused.
Is this a limitation in DW? Is there a work around anyone can
suggest?
TIA

So, you have some number of people who are editing the child
pages and you
want to constrain their editing choices? Are you using
Contribute?
Anyhow, I am not aware of any convenient way you can do
something like this
using DW's Template features.
Murray --- ICQ 71997575
Adobe Community Expert
(If you *MUST* email me, don't LAUGH when you do so!)
==================
http://www.projectseven.com/go
- DW FAQs, Tutorials & Resources
http://www.dwfaq.com - DW FAQs,
Tutorials & Resources
==================
"manicbananic" <[email protected]> wrote in
message
news:g7pimq$fvg$[email protected]..
>I want to produce a template that will let users create
pages that list
>items
> as a thumbnail image and a short text description, one
after the other.
>
> I can set this up as a repeating region, but I would
also like to make
> only
> certain attributes of the image editable (src and alt
for example).
> However,
> when I use editable tag attributes to do this, the image
in each repeated
> region ends up with the same attribute values - when I
add a new repeat
> region
> and then change the src tag through the Template
Properties dialog,
>
all
> of the images take on the same src value. Looking at the
code, it looks
> like
> the editable instances in each repeated region get the
same name, and so I
> can
> see that DW will get confused.
>
> Is this a limitation in DW? Is there a work around
anyone can suggest?
>
> TIA
>

How to edit the attributes of a SAP standard screen?

hello all,
i would like to ask if it is possible to edit the attributes (particularly the language) of a SAP standard screen without using any access key? if yes, how would i be able to apply the changes?
thanks!
- annalyn

Hi,
Screen attributes are stored in table D020S. You can update this table using ABAP code. The language is stored in field SPRA of this table. The texts appearing on the screen are in D020T.
It is likely you will not be allowed aa data modification statement (INSERT/UPDATE...) on these tables if you are on newer versions of SAP (46/47...). You can bypass that by using native SQL and some other workaround (which might be another thread here).
It is most strongly recommended to not modify SAP standard objects, and specially not without an object key. However, if you are working on something like a miniSAP and want to play around with it, the method mentioned above shall do.
Hope this helps,
cheers,
Ajay

Using Bash script to edit config file

This is a really simple question, but given that I'm just learning Bash scripting and having this solved now would be really illustrative for me, I would really thank some help here.
I'm using uzbl, and running Tor+Polipo. So, as you will see below in the tail of the config file, there is a line to redirect the requests of uzbl through Polipo.
# === Post-load misc commands ================================================
sync_spawn_exec @scripts_dir/load_cookies.sh
sync_spawn_exec @scripts_dir/load_cookies.sh @data_home/uzbl/session-cookies.txt
# Set the "home" page.
#set uri = https://duckduckgo.com
# Local polipo proxy
set proxy_url = http://127.0.0.1:8123
# vim: set fdm=syntax:
What I want to accomplish is to comment in/out that line with a key shortcut on Awesome. I've thought of doing 2 scripts to do so and using 2 differente key shortcuts, but I want to "toggle" the proxy redirection with only 1 shortcut. To do so, I suppose that the script should go something like:
if
tool 'set proxy_url = http://127.0.0.1:8123' config_file
then
tool '#set proxy_url = http://127.0.0.1:8123' config_file
else
if
tool '#set proxy_url = http://127.0.0.1:8123' config_file
then
tool 'set proxy_url = http://127.0.0.1:8123' config_file
fi
fi
I know little about sed, but I think is the tool for this job. The most intriging part to me is to ask sed to print the regular expression when it finds it in the config file, and use that as an input in the conditional statement.
Well, this is a mess I have done here. Hope there is a simple answer to this.
Thanks in advance.-

You can do this with a single sed command:
sed -i 's/^#set proxy_url/set proxy_url/;
t end;
s/^set proxy_url/#set proxy_url/;
: end' config_file
This edits the file in-place (-i) and first tries to replace the commented with the uncommented line. If that suceeds, sed jumps to the "end" label. If not, it tries to replace the uncommented with the commented line. Thus you don't have to include any logic about the current state: if the first substitution succeeds, the line was obviously commented, if not, it was uncommented, and the second substitution should succeed.
Note that my knowledge of sed is very limited. There might be a simpler way to do this.
EDIT: For the sake of example, here's how to do the same in bash using regular expressions. Note how this script needs to use a temporary file to simulate in-place editing, how it needs to process the file line by line manually, etc. All things that sed does out of the box...
#!/bin/bash
tmp=test.conf.tmp
echo -n "" > "$tmp"
while read line; do
if [[ "$line" =~ ^#set\ proxy ]]; then
echo "${line/\#/}" >> "$tmp"
elif [[ "$line" =~ ^set\ proxy ]]; then
echo "#$line" >> "$tmp"
else
echo "$line" >> "$tmp"
fi
done < test.conf
mv test.conf.tmp test.conf
To answer your original question, the line
if [[ "$line" =~ ^#set\ proxy ]]; then
reads: if the line begins with a "#", followed by "set proxy", then...
Last edited by hbekel (2011-03-20 10:40:16)

Powershell script to set custom attribute on mailuser returns WARNING: The command completed successfully but no settings of user have been modified.

I am trying to write a script to enable a mailuser (I do know the difference between mailuser and mailbox) and set a custom attribute for that mailuser. Every time I run the script I get "WARNING: The command completed successfully but no settings
of <User DN> have been modified." Both commands being invoked work when typed manually into the exchange management shell on the exchange server itself. I am using the same administrator account in the script, and when I login to the
exchange server to manually run the commands, so it shouldn't be a permission issue. Here is my script so far. If anyone can shed some light on what I'm doing wrong, I'd appreciate it.
$excel = new-object -com excel.application
$wb = $excel.workbooks.open("c:\temp\testmail8.xlsx")
$ws = $wb.Worksheets.Item(1)
$row = 1
$s = New-PSSession -ConfigurationName microsoft.exchange -ConnectionUri http://<Exchange Server Name>/powershell -Credential [email protected]
Do {
$Email = $ws.Cells.Item($row, 1).Value()
$Cat = $ws.Cells.Item($row, 2).Value()
invoke-command -Session $s -ScriptBlock {Enable-MailUser -ExternalEmailAddress $($args[0][0] + "@domain.com") -Identity $($args[0][0])} -ArgumentList (,$Email, $Cat)
invoke-command -Session $s -ScriptBlock {Set-MailUser -Identity $($args[0][0]) -CustomAttribute1 $($args[0][1])} -ArgumentList (,$Email, $Cat)
$row++
} While ($ws.Cells.Item($row,1).Value() -ne $null)
$excel.quit
Exit-PSSession

Hi,
I'm not sure where is wrong in your script. If you want to get more help about the script troubleshooting, I recommand you to ask a question in Script Center forum for more professional answers:
http://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?forum=ITCG
As a workaround, please directly create a mail user in EAC and set related custom attribute to have a try.
Thanks,
Winnie Liang
TechNet Community Support

Script to change DN attribute in AD to be the same as sAMAccountName

Recently I was asked to change the Display Name for all the users in AD in my organization. I was asked to do so because the previous AD/Exchange Admin created all accounts using the default of "FirstName MiddleInitial LastName". The
new staff wanted the Display Name to be "LastName, FirstName MiddleInitial".
I made this change using this script I found on the Internet:
# Pre-Users.ps1 - Change the name & display name of existing users.
# Created by - Amit Tank
$Users = Get-User -ResultSize unlimited | where {$_.RecipientTypeDetails -eq "UserMailbox"}
ForEach ($User in $Users)
$DName = $User.LastName + ", " + $User.FirstName + " " + $user.Initials
$DName = $Dname.Trim()
Set-User $User -Name $DName -DisplayName $DName
Get-User $User | FT Name, DisplayName
$DName = $Null
}When I made this change however it changed the DN of each user and the organization is using google sync and can no longer synchronize with google.I think if I had a script that would change the DN to the value of the user's sAMAccount name it would be fixed. I have setup a test OU where I can test this with just one user.I have found a few scripts that claim that they work and that it can be done, but all of them I try I get various errors. Here is one that I made based from other information I have found:# Get sAMAccountName and
then change DN to be the same.
Get-ADUser -Filter * -SearchBase "OU=TEST,DC=MCCSC,DC=EDU"
ForEach ($User in $Users)
set-aduser -Identity "*" $_.distinguishedname -sAMAccountName
($_.samaccountname)
}When I try running this script I get the following error:Set-ADUser : A positional parameter cannot be found that accepts argument '$null'.I am a realitive PowerShell n00b so I really don't know what the heck it is saying there. I don't think I have any parameters not definded or set null, so I am not sure.If I can get a script that will reliably change just the DN to be the same as the sAMAccountName then I can test it and I think everything will be fine.Can anyone help me a bit with this please?Thanks,Nick

I am going to guess that the first script posted by the OP worked; it renamed the user object (changed the DN) and also assigned a value for displayName. But this is not what the OP wanted, so they want a script to fix the situation; a script that will make
the Common Name (the value of the cn attribute) of the user equal to the sAMAcccountName, and perhaps also assign the desired value for displayName. If so, the following script, which assumes the first script worked for the user, should do what is needed:
$Users
= Get-User -ResultSize unlimited |
where {$_.RecipientTypeDetails
-eq "UserMailbox"}
ForEach ($User
in $Users)
    If (($User.LastName
-ne $Null)
-and ($User.FirstName
-ne $Null))
        $DName
= $User.LastName
+ ", "
+ $User.FirstName
+ " "
+ $User.Initials
        $DName
= $Dname.Trim()
        $LName
= $User.sAMAccountName
        If (($User.Name
-ne $LName)
-and ($User.Name
-ne $DName))
            Set-User
$User -Name
$LName -DisplayName
$DName
        ElseIf ($User.Name
-ne $LName)
            Set-User
$User -Name
$LName
        ElseIf ($User.DisplayName
-ne $Dname)
            Set-User
$User -DisplayName
$DName
        Get-User
$User | FT Name, DisplayName
        $DName
= $Null
        $LName
= $Null
Richard Mueller - MVP Directory Services

WLST script to edit application.xml

We have an EAR that is being deployed to 6 different domains. I was wondering if there is a way to dynamically set the value of the "web-uri" and "context-root" elements of the application.xml file for all the modules inside the EAR, based on the domain in which the EAR is being deployed.
Currently, we are making 6 copies of the EAR, editing the application.xml file in each EAR and deploying them through the weblogic admin console. I thought I would write a script to automate the process.

Hi,
If you want to dynamicall make any Modifications in your Deployment Descriptors like "application.xml"..."weblogic.xml"...etc then you can use *"Plan.xml"* feature provided bu WebLogic....
Example : http://jaysensharma.wordpress.com/2009/11/29/shared-library-with-plan-xml/
Example : http://jaysensharma.wordpress.com/2009/12/16/updating-cookiename-using-plan-xml/
Thanks
Jay SenSharma

Script to Edit Gaussian Blur Effect

Hello
I have a complex piece of artwork which has to be scaled up by a factor of 10. No problem except the Gaussian Blur Effect will not scale.
Rather than go through each path and edit the blur amount (by a factor of 10) I had hoped I could write a script which would iterate through every path and if it had a Gaussian Blur Effect edit the value.
Looking in the AppleScript dictionary and online I can't see any way of accessing a path's Appearance or Effects.
I would be very grateful for some advice on this before I start the tedious process of manually changing the values.
Regards
Chris

Hello Mark
Thanks for your prompt reply. I thought as much. It's disappointing really.
The select filters will not unfortunately be helpful because the blurs are different so I can't select all blurred items because I don't want to set them all the same and equally I can't pick one and select all with the same blur amount because I don't know if I have changed all of the items.
I've just got my head down and am selecting them all individually and editing them!
Regards
Chris

Bug editing report attributes in Firefox

Has anybody logged this problem before?
It occurs in Apex 2.2 and 3.0 and FireFox 2.2, but I cannot reproduce it using IE6.
Open a page with a report region and go to the report attributes.
Look at the Headings Type and remember the setting.
Edit one of the columns using the "pencil icon".
Go back to the report attributes using the back button in the browser.
The Headings Type has changed!
This can cause you to lose your custom headings.
Rob

from someone who clearly knew HTMLDB/Apex inside and out I'd say 'clearly not' if they said it wouldn't work on other browsers than IE ;)
Unless you're misquoting or mis-remembering what they actually said then that statement you heard was in direct conflict with the "Supported Browsers" section of the documentation -
http://download-uk.oracle.com/docs/cd/B32472_01/doc/relnotes.300/b32465/toc.htm#BGBCEGBI
which quotes -
To view or develop Oracle Application Express applications, Web browsers
must support JavaScript and the HTML 4.0 and CSS 1.0 standards. The
following browsers meet this requirement:
Microsoft Internet Explorer 6.0 or higher (Windows only)
Firefox 1.0 or higherI'll also add that 'officially supported' and 'will work' are actually two different things. I use a Mac and my browser of choice is usually Safari or Firefox and whilst Safari is not 'officially supported' the APEX Application Builder works absolutely fine (the SQL Workshop does not work though). However pretty much every application that I develop with APEX will also work in Safari quite happily.
not like those fly by night trainers who just go on the course themselves to teach it the next >week straight from the notes as I've seen on a few of the coursesI'm not sure who you're referring to specifically, but as with any course the best people (I have found) to teach are those people who do use the product day in and day out and have a passion for it, so perhaps it's another good opportunity to point out the following link -
European APEX Training
http://eurotraining.apex-evangelists.com/
(end of shameless self-advertising ;)
There are also many other great teaching courses around, including the event at ODTUG -
http://www.odtugapextraining.com/
and trust me...you won't hear anyone saying things like "APEX doesn't work in anything else but IE" at any of these training events ;)

Writing Cleint side scripting to edit internal table

Hello Gurus
I have a internal table which i am displaying in tableview . i want to add record into the itab when i i click on one button on the form.
I want to do it this action in the client side using abap script of java script.
I am not sure how to handle internal table with java script. and one more question is that how to write client side abap script.?
Is there any recommendation?
Thanks
Hari

I guess you didn't quiet understand my question.
1. Can i access page attribute s( ex:iinternal table ,or string variable ) in the client script.( java script which runs on client browser ).
2. If the above answer is yes, how to add a record into intertal table with java code . ( syntax ) .
Thanks for the help.
Thanks
Hari

Change/Edit Request Attributes in CUP at Approval Stage

Hi All,
We have SAP GRC AE/CUP 5.3 SP07 installed in our environment. In our work flow of the request, there is a requirement that some of the request attributes need to be changed by the role owner/ approver at the approval stage of the request. The request contains both SAP standard as well as some custom attributes. I only see an option to edit the validity date or the roles/profiles of the request at the approval stage. Is this option configurable? If not, do we have any work around to achieve the requirement?
Thanks, Anil

Hi Harleen and Alpesh,
We are in GRC 5.3 SP8 and we would like to allow approvers in each stages to change the validity date (e.g. Valide to date) in a role request.   Here is the situation:
I have a workflow path which has two approval stages.   Both stages were configured to allow "Change Request Content".    What I noticed is the approver in the first approval stage can change the validity date and then approve the request.    But when the request is on the 2nd approval stage, the approver can no longer modify the validity date.
Is this the same scenario which Harleen said that "You cannot edit the information of a request once it enters the approval stages"?   If this is the same scenario, do you know whether a fix is considered by or available from SAP?
There may be situations where we don't want the 2nd approver to overwirte what 1st approver has approved.   However, in some situations we may want to keep that flexibility to let the later approver to have the last say.
Thanks for your input.

Why My Screen Painter Only can Edit Specific Attributes

In my Screen Painter, i only can edit the item's specific Attr,like Caption,but I can't edit the uniqueID,Type.....
The specific Attr has a EditTxt dialog that i can enter my value,but for the items, it seems disapear. I only see the Attr Name and scrollbar,no edit dialog.
Why?

Hi Frank,
I'm not sure wether I have well understand your problem, I will try to answer anyway.
The UniqueID, Type, Description... attributes are included into the general item characteristics. When you click on an item you can see in the Items tab all the attributes (in the top the general ones and in the bottom the specifics).
I can modify all the items attributes without problem.
Are you using a specific item type?
Which B1/SDK version do you have?
Regards
Trinidad.

Script to edit 'isCriticalSystemObject' attribute

Similar Messages

Maybe you are looking for