Provision or decommission users in AD with workflow

  • 14 January 2016
  • 9 replies
  • 7 views

Badge +9

I would like to start experimenting with AD actions in my Nintex workflow but I am having hard time finding good documentation. Do you know of any good resources? How do you configure Nintex engine to be able to modify the AD? Any other best practices? Thanks!


9 replies

Badge +7

You might want to look at the help-file/documentation available at http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html . There are a couple of actions that directly interact with the AD: http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html#Nintex.Workflow.CreateADSecurityGroup, http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html#Nintex.Workflow.CreateADAccount. http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html#Nintex.Workflow.DecommissionUser , http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html#Nintex.Workflow.DeleteADSecurityGroup , http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html#Nintex.Workflow.AddUserToADGroup http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html#Nintex.Workflow.DeleteADSecurityGroup

Badge +9

Thanks for the reply. I already saw this. I am more looking into configuration before you can start using those actions. I assume there needs to be a service account of sorts that I need to grant certain permissions in AD.

Badge +7

Yep, you'll need an account that has permissions to read/write to the AD. You configure this account in the action - there should be fields for username/password. There you wand to insert something like "acmeigboss" for username.

You will also need the LADP-path of the OU where the user-object should be created. You can get this from the AD-MMC console or use some kind of LDAP-Browser.

Other than that, there are no pre-requisits to these actions.

Badge +9

Any chance you have a link to the official documentation about it?

Badge +7

Well, basically the link http://nintexdownload.com/helpfiles/nw2013/nintexworkflow2013usermanual.html#Nintex.Workflow.CreateADAccount  should contain everything you need - it explains at least in basic terms each field.

You should get the same documentation if you click on the help-button within the action-configuration.

Badge +9

Thanks again but I don't need documentation how to use the action. Nintex actions in most cases are self-explanatory. I am looking for the official Nintex documentation on what account to create with what permissions to be able to use actions for AD. I don't see that information in the link you provided.

Badge +7

I'm afarid I am not aware of such a documentation. But if you already have a service account that has the appropriate permission to create users in AD (for example a user that you might have used to manually create users in AD), you could enter those credentials in the action.

Badge +9

The problem is more complex for me. We are a SOX compliant company and entering in this scenario a username / password for an account with full permissions to AD might not be the best solution...

Badge +9

I got all of my answers through trial and error. It would be nice to have a more in-depth documentation but at least I learned a lot of new stuff!

Reply