bjoern-cusatum

You can go to User A, select "Change Group Memberships" from the context menu, mark and copy all the needed groups (ctrl+a, ctrl+c do work), go to User B and paste them there (ctrl+v works). Or create a department profile in the WebUI which contains the group memberships. Then you can easily apply this to users.

@"ege"Yes, the user will be moved to the recycling OU.

Workaround would be a bit of scripting and app8mancommand.

Loadbalancers work, I know this because I configured a Kemp Loadbalancer years ago with a customer. You just need to configure it in ARM like the Exchange Server. Nothing special to be done on the ARM site since the loadblancers work is to be transparent for all other systems and not be destinguishable from the real…

When you use the "Pause User" feature without giving it an end-date it acts as soft delete. A proper name or button would be good.

Exchange Logga uses mailbox auditing, that's why in my opinion "Logga" is not a good name (and also it is a common misunderstanding of customers of the product that they think these permission changes are logged). It only audits actions within a mailbox. "Send as" and "Receive as" are permissions on the AD object and are…

I think you have not configured ARM correctly. All change credentials can be set in the appropriate change configuration (scan configuration for AD; old setting still not migrated to the change configuration). The appropriate setting is using a service account to make the changes. If it asks you for credentials in the UI,…

WIth just one domain, it could make sense, yes. For most it worked entering credentials once and then using the "save for this session" option. There are even customers who wish no credentials to be saved (security). I can't remember a customer looking for this in 5 years, most just asked with no real wish behind it. But…

ARM runs in trial mode when the 8MAN license file is removed from the license folder %ProgramData%\protected-networks.com\8MAN\licenses. You can load the license then again.

The actual properties are badpasswordtime, badpwdcount and logonCount. Add them to PropertiesToLoad in the pnServer.config and use the Analyze&Act scenario "All users". You can then display the attributes: The only "problem" is badpasswordtime because the actual value (ticks) will be displayed instead of a date-time-value.

This already possible in the WebUI. Just do an inactive accounts report in the Analyze option: and add the manager field from the drop down selection: And then you can export is as a report.

Copying a user is never a good idea because it can be considered a security risk because you might copy too many group memberships (e.g. workers council group memberships). That's why you always should use templates.

That's the nearly word for word explanation how to do it with ADManager Plus, not a SolarWinds product. ARM can not do this.

Password only works when the parameters are transfered as json object in the script configuration. Here's a special function implemented which passes on the password. It does not work in the (old) variant which is integrated in the templates. This is just basic attribute/parameter transfer and the password is not an…

Ah ok, it's just to avoid confusion. Especially with non-technical people this is usually true. But yeah, the account details report is meant to give you the needed information, as you said yourself. It would be a feature request to change the report this way. And yeah, Analyze can do that like you said, but the main focus…

It should be sorted by the last name, which can be confusing because the first name is first.

In most companies it's not common that a lot of attributes for several employees change at the same time. It's good to finally fill the attributes (lots of companies don't work with them) or if your company is large enough that a bulk-import is the easiest solution. If the values are the same, you might want to check out…

FS Logga does not need a configured report for alerts. Just turn it on and set the alert sensor to active. Then you can configure an alert.

Oh, you're right. That folder did not change. I somehow got triggered by the old-part since a lot changed and there are some hints for that in the manual. The line you found with the errors is a print of what's going on in PowerShell, so it show you in the following lines what's going on and if there's an error. If I…

@"8paul"true, my mistake and total brainfart. Went to the wrong tab and mistaken it... removed it from the original post so people won't get too confused.

Oh wait, I'm blind you're using the wrong config setting. To turn off OU sorting: <exchange.makeMailBoxOUCategories type="System.Boolean">false</exchange.makeMailBoxOUCategories> Then it will go back to the old grouping by surename if there are more than 200 users. Combined with this: <exchange.makeMailBoxCategories…

Hi Florian, yeah, that error message is not saying much. Could be a subsequent error of a different one. I would not recommend sharing the logfile here. There could be data in it that shouldn't be posted publicly. Just open a ticket with SolarWinds, they should be able to help you. Cheers Björn

No, usually not. But it can happen that the update won't complete because there's a reboot pending from the Windows Updates.

The GPO change tracking is part of AD Logga and not marked as an extra feature. Configure audit policies for the domain controllers (DC) There are some additional entries for the GPOs you need to make for Grou Policy changes to be tracked, just check with what you've set so far. Once that's done there will be a new column…

Good to hear, happy logging!

The color, icon and company logo custumization theoretically does still work but since the rebranding and rededign from 8MAN to ARM it does not look pretty anymore and barely works. I would not recommend it anymore. And all reports in the are fix, no further customization in what they show except what you can set in the…

You can tell ARM how to handle the attributes. By default ARM assumes it's just a plain string. <TypeInfo>System.String</TypeInfo> But you, for example, do boolean: <TypeInfo>System.Boolean</TypeInfo> (That's also mentioned on the Properties manual page.) MultiValue is also possible: <TypeInfo>System.String[]</TypeInfo>…

Same here. It's a bug in the current 2020.2 version. The DevVersion they sent out to me has the fix.

Wait, an addition: since you blacklisted them from being resolved it won't help. You need this as well: <fileSystem> <recertification> <suppressSidsDefault type="System.String">S-1-3-0;S-1-3-1;S-1-3-2;S-1-3-3;S-1-5-80-0;S-1-5-1;S-1-5-2;S-1-5-3;S-1-5-4;S-1-5-9;S-1-5-18;S-1-5-19;S-1-5-20</suppressSidsDefault>…

Hi Paul, actually it is possible to pass on the password as variable. This was included sometime 2018 because many customers asked for it. Cheers Björn