Query LDAP - get if a user is disabled in active derectory

[bbg]

Issue: I have a list where I wanted to check if the user is disabled or not)

I have created a site workflow and the collection of users who I wannted to check-up at.

But when I comes to the configuration og Query LDAP action then I got problem.

LDAP path OK

Query: (&(objectCategory=user)(mail={WorkflowVariable:wf-NavnEmail}))

My problem is how can I get userAccountControl value (Property to retrieve) and later do a run if on value 514:

[jpmhuls]

Hi @bbg,

Just put the property name in the field "Property to retrieve" and click add to link it to a workflow variable. It either has a number (514 is indeed locked account) or empty (account does not exist).

[bbg]

When I try to find the property name I can not find userAccountControl anywhere

Should I could find/select form here:

[jpmhuls]

Hi @bbg,

First create a numeric or text workflow variable varUserAccountControl.

Then when configuring the Query LDAP, enter userAccountControl in the field "Property to retrieve" and click the Add button. The property will be added with the option to select a workflow variable, where you can select varUserAccountControl

NB: the correct LDAP property name(s) you can find anywhere on the Internet.

[mlauer · Accepted solution]

see LDAP Query for all active users

[bbg]

if I use this in loop For each
(&(objectCategory=user)(name={WorkflowVariable:wf-NavnMedlem}))
I dont recieve information about UserAccountControl for the user
(I have tried the same in run now, execute = No results returned)


but if I use this (&(objectCategory=user)(name=bdubbg))
I recieve the right information 512
and with a user which are disabeled 512
So my problem are in my loop and get the result for the varUserAccountControl

[bbg]

Thanks's for helping me - it Works now 🙂