Comparing AX and Active Directory User Accounts

re: Comparing AX and Active Directory User Accounts

Jesman — Mon, 14 May 2012 19:56:20 GMT

Wrote once a Job to update the SID after a Domain change, but you could also use it to Sync the active accounts between AD and AX

static void ChangeDomain(Args _args)

{

UserInfo userInfo;

xAxaptaUserManager axUsrMgr;

xAxaptaUserDetails axUsrDet;

Boolean doUpdate;

Username user;

SID oldSID;

#define.NewDomain("New.DOMAIN.NET")

;

doUpdate = Box::yesNo("User aktualisieren?", DialogButton::No) == DialogButton::Yes;

axUsrMgr = new xAxaptaUserManager();

ttsbegin;

setPrefix('SID-Aktualisierung');

while select forupdate userInfo

{

axUsrDet = axUsrMgr.getDomainUser(#NewDomain,userInfo.networkAlias);

if(userInfo && axUsrDet)

{

oldSID = userInfo.sid;

userInfo.networkDomain = #NewDomain;

userInfo.sid = axUsrMgr.getUserSid(userInfo.networkAlias, #NewDomain);

if(doUpdate)

{

info(strfmt("Aktualisiert", userInfo.networkAlias));

userInfo.update();

}

else

{

error(strfmt("Nicht gefunden", userInfo.networkAlias));

}

ttscommit;

}

re: Comparing AX and Active Directory User Accounts

Willy — Thu, 03 May 2012 11:13:41 GMT

Dynamics Ax has built in classes for that kind of queries.

Use class 'xAxaptaUserManager' and class 'xAxaptaUserDetails' for this. A simple query of the users and calling these classes to get the details does the trick. No need to complicate things.

dynamics-ax-live.blogspot.com

re: Comparing AX and Active Directory User Accounts

Denis — Wed, 02 May 2012 14:14:28 GMT

This is nice but a way too complex. Here's a sample job that does the same:

#define.UserAccountControl ('userFlags')

#define.UF_ACCOUNTDISABLE (0x0002)

Counter numTotal;

Counter numNotFound;

Counter numDisabled;

UserInfo userInfo;

int userAccControl;

COM dirObject;

str dirPath;

;

while select userInfo

where userInfo.networkAlias

&& userInfo.networkDomain

{

numTotal++;

dirPath = strfmt(@"WinNT://%1/%2,User", userInfo.networkDomain, userInfo.networkAlias);

dirObject = COM::getObjectEx(dirPath);

if (dirObject)

{

if (userInfo.enable)

{

userAccControl = dirObject.get(#UserAccountControl);

if (bitTest(userAccControl, #UF_ACCOUNTDISABLE))

{

numDisabled++;

info(strfmt("%1@%2 disabled in AD, but not in AX", userInfo.networkAlias, userInfo.networkDomain));

}

dirObject.finalize();

dirObject = null;

}

else

{

numNotFound++;

warning(strfmt(@"%1@%2 - not found", userInfo.networkAlias, userInfo.networkDomain));

}

info(strfmt(@"Total: %1, not found: %2, disabled in AD, but not in AX: %3", numTotal, numNotFound, numDisabled));