You might want to look at the help-file/documentation available at http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html . There are a couple of actions that directly interact with the AD: http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html#Nintex.Workflow.CreateADSecurityGroup, http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html#Nintex.Workflow.CreateADAccount. http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html#Nintex.Workflow.DecommissionUser , http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html#Nintex.Workflow.DeleteADSecurityGroup , http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html#Nintex.Workflow.AddUserToADGroup http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html#Nintex.Workflow.DeleteADSecurityGroup

Thanks for the reply. I already saw this. I am more looking into configuration before you can start using those actions. I assume there needs to be a service account of sorts that I need to grant certain permissions in AD.

Yep, you'll need an account that has permissions to read/write to the AD. You configure this account in the action - there should be fields for username/password. There you wand to insert something like "acmeigboss" for username.

You will also need the LADP-path of the OU where the user-object should be created. You can get this from the AD-MMC console or use some kind of LDAP-Browser.

Other than that, there are no pre-requisits to these actions.

Any chance you have a link to the official documentation about it?

Well, basically the link http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html#Nintex.Workflow.CreateADAccount  should contain everything you need - it explains at least in basic terms each field.

You should get the same documentation if you click on the help-button within the action-configuration.

Thanks again but I don't need documentation how to use the action. Nintex actions in most cases are self-explanatory. I am looking for the official Nintex documentation on what account to create with what permissions to be able to use actions for AD. I don't see that information in the link you provided.

I'm afarid I am not aware of such a documentation. But if you already have a service account that has the appropriate permission to create users in AD (for example a user that you might have used to manually create users in AD), you could enter those credentials in the action.

The problem is more complex for me. We are a SOX compliant company and entering in this scenario a username / password for an account with full permissions to AD might not be the best solution...

I got all of my answers through trial and error. It would be nice to have a more in-depth documentation but at least I learned a lot of new stuff!