ALVAO AD Account Creator

Module supports the beginning of new employment process. It allows to create new user in the Active Directory based on a request in the ALVAO Service Desk.

Computer Requirements

• ALVAO Service Desk
• Active Directory (Windows Server 2008 R2 or later)

Installation

Unzip the AlvaoAdAccountCreator.zip package on the server into the C:\Program Files (x86)\ALVAO\Admin folder (into the C:\Program Files\ALVAO\Admin folder on 32-bit systems).

Settings Procedure when Used without Cooperation of the ALVAO Employee Management Module

1. Create a supporting service in the ALVAO Service Desk, e.g. "IT/Active Directory/Creating User Account".
2. Set permissions to use SLA for people who can request an account creation.
3. Set the operator and solver permission to employee who will manually create the accounts which could not be created automatically.
4. Create custom request items containing information needed for creation of the account in AD. Especially the items for user name and login.
   For example, the items tHdTicketCust.UserFirstName, tHdTicketCust.UserLastName and tHdTicketCust.UserLogin.
5. In the Admin tool create new process using Manage – Service Desk – Processes – New. Name the process for example "Accounts creation".
6. Set the process procedure in the following way:
   

   Status	Description	Instructions for solver	Notes
   New	Automatic account creation in progress	Do not perform any action, the automatic account creation is in progress in AD. The request status will be automatically changed after the account is created.
   Manual Account Creation	Could not create the account automatically. The account will be created manually.	Could not create the account automatically. Check the data inserted and create the account manually.
   Resolved			"Change automatically to Closed status" option is enabled.
   Closed	Request is closed.

7. Add custom columns created in step 4 to the items of request on process. Set the items as required for the "New" status.
8. Assign the process to the supporting service created in step 1.
9. Using the job scheduling in Windows schedule the CreateADUsers application launch with suitable parameters. Select appropriate period of the task launch, e.g. 10 minutes. Launch the task under the user who has a permission to create accounts in AD. Example of parameter settings:
   CreateADUsers /adpath "LDAP://ADServer/DC=acme,DC=com" /conn "Data Source=.\sqlexpress;Initial Catalog=ALVAO;Integrated Security=True" /service "IT/Active Directory/Creating User Account" /beginstate New /endstate Resolved /failedstate "Manual Account Creation" /propmap "cn={UserLastName} {UserFirstName}" /propmap "givenName={UserFirstName}" /propmap "sn={UserLastName}" /propmap "sAMAccountName={UserLogin}" /propmap "password=starterpass" /loginmutations 5
   See more in the CreateADUsers tool description.

Settings Procedure when Used with Cooperation of the ALVAO Employee Management Module

1. First prepare the ALVAO Employee Management module for operation according to the manual.
2. Prepare the module for operation according to the procedure described in previous chapter.
3. Set permissions to use SLA on the supporting service at least in the manner it is set for the Employee Management module.
4. Ensure filling up the custom items in the beginning of new employment form from the ALVAO Employee Management module.
5. Ensure the beginning of new employment form creates also a request to the "IT/Active Directory/Creating User Account" supporting service.

Did not find what you were looking for? Ask our technical support team.