Remove a specific group membership of an Active Directory user account.
Unlike the script action Script
Action: Remove user group memberships (AD) it does not remove ALL
user groups, but only a specific one.
This action is typically used in a script that is intended to manage
existing user accounts. With this action you can delete the user account
from a specific group of which the account is a member. More specifically,
you would be using this function if a user moves from department A to
B in which case you will need to remove specific group memberships and
add new ones.
|
Property Name |
Description |
Typical setting |
Remarks |
|
Group name (LDAP) |
The full LDAP name of the group from which
the membership must be updated. To specify the group, enter a value for
either the property "Group name (LDAP)", "Group name (SAM
account name)" or "Group object". |
NA |
Unique within OU |
|
Group name (SAM account name) |
The group name specified using the SAM account
name (e.g. DOMAIN_A\Group_C). To specify the group, enter a value for
either the property "Group name (LDAP)", "Group name (SAM
account name)" or "Group object". |
NA |
Unique within domain |
|
Group object |
A data structure representing the group. To
specify the group, enter a value for either the property "Group name
(LDAP)", "Group name (SAM account name)" or "Group
object". |
NA |
This value can only be generated as a variable
resulting from a previous script action. |
|
Account name |
The LDAP name of the account from which the
group membership must be removed (e.g. LDAP://DC_B/CN=Student,DC=Domain,DC=com) |
NA |
|
|
Account object |
A data structure representing the account
from which the group membership must be removed. To specify the group
member, enter a value for either the property "Account Name"
or "Account object". |
NA |
This value can only be generated as a variable
resulting from a previous script action. |
