How do I configure Directory and Resource Administrator to write password changes to all domain cont (NETIQKB11047)

  • Document ID:7711047
  • Creation Date:02-Feb-2007
  • Modified Date:19-Jun-2007
    • Micro Focus Products:
      Directory and Resource Administrator

Resolution

goal
How do I configure Directory and Resource Administrator to write password changes to all domain controllers instead of one?

fact
Directory and Resource Administrator 6.x

fix

A trigger can be configured in Directory and Resource Administrator (DRA) to update all domain controllers in the domain when a password is reset.  A sample post-task trigger is available in the Knowledge Depot, which pushes out password changes made, using DRA, to all domain controllers.  The script can be downloaded from the "Policy and Trigger" scripts section in the Knowledge Depot PushUpdatesToDCsPost.vbs (requires username and password).

To configure the trigger, perform the following steps on the Directory and Resource Administrator server:

  1. Download the PushUpdatesToDCsPost.vbs script to the desired location on the DRA servers. For example, C:\scripts\PushUpdatesToDCsPost.vbs .
  2. Launch the 'Directory and Resource Administrator' interface.
  3. Expand 'Policy and Automation Management' node and select Automation triggers.
  4. Select New.
  5. Click Browse in the Associate to Operation text box and select UserSetInfo and UserSetPassword operations.
  6. Select the post-task trigger radio button and click Next.
  7. Select All ActiveViews under the "Apply to actions on objects included in" section.
  8. Select All Assistant Admin groups under the "Apply to actions performed by" section and click Next. 
  9. Select Script for the File type and input the pathway to the script in the DO file path (ie.  C:\scripts\PushUpdatesToDCsPost.vbs) and click Next.
  10. Change the error if desired and click Next.
  11. Specify a name for the trigger and click Next | Finish. 


note
This trigger may cause performance problems ,when resetting passwords using DRA, depending on the number of domain controllers in the domain and if they reside across slow WAN links.

note
DRA will replicate the trigger setting from the Primary DRA server to the Secondary server, however the actual script file must be manually copied to the same location on all secondary servers.

Additional Information

Formerly known as NETIQKB11047