Quest Active Server Roles - User Provisioning Policy
This is an example of a training user with the following.
- Random unique username.
- user cannot change password
- no mailbox
- password never expires
- account expires every 30 days
- 'Virtual_Attribute_Requester' is the person responsible for the account
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
- Generates user logon name (pre-Windows 2000) based on directory data such as user properties
- Validates the 'First Name' property values for 'User' objects VALUE - TrainingAccount
- Validates the 'Last Name' property values for 'User' objects VALUE - %
- Validates the 'Account Name (UPN Prefix)' property values for 'User' objects VALUE - %
- Validates the 'UPN Suffix' property values for 'User' objects VALUE - @Acme.com
- Validates the 'Name' property values for 'User' objects VALUE - %
% - Validates the 'Display Name' property values for 'User' objects VALUE - %
- Validates the 'User Must Change Password At Next Logon' property values for 'User' objects VALUE - False
- Validates the 'User Cannot Change Password' property values for 'User' objects VALUE - True
- Validates the 'Password Never Expires' property values for 'User' objects VALUE - False
- Validates the 'Account Is Disabled' property values for 'User' objects VALUE - False
- Validates the 'Create User Mailbox' property values for 'User' objects VALUE - False
- Validates the 'Logon Name' property values for 'User' objects VALUE - %
@Acme.com - Validates the 'Description' property values for 'User' objects VALUE - ACME,%
,% - Automatically adds or removes specified objects from specified groups VALUE - Acme Training users
- Validates the 'Virtual_Attribute_Requester' property values for 'User' objects VALUE - Must be specified
