PX-101.01 AD Manager DN Sync true AD Policies Synchronizes the AD "manager" attribute whenever the manager attribute changes in the UserStore. false 101 SUBMITTED_TASK false PolicyXpress SUBMITTED_TASK TASK_COMPLETED Modify_Employee ]]> user landomain element.type.user.attribute element.user.attribute.get 5 landomain user landn element.type.user.attribute element.user.attribute.get 6 landn user landn end Index element.type.string.searcher element.string.index.of 7 {'user landn'} ,OU= parse DN element.type.string.parser element.string.manipulation.substring 8 {'user landn'} 3 {'user landn end Index'} landn element.type.attribute.of.a.specific.user element.attribute.of.user.get 4 {'newManager'} landn getADAccount element.type.constant element.constant.get 9 {'user landomain'}:{'parse DN'} adMangerSyncLoopVariable element.type.variable.value element.variable.get 10 adMangerSyncLoopVariable adMangerSyncLoopVariable2 element.type.variable.value element.variable.get 11 adMangerSyncLoopVariable2 ifManagerChanging element.type.has.user.attribute.changed element.has.user.attribute.changed.get 1 manager lanid element.type.user.attribute element.user.attribute.get 0 lanid oldManager element.type.has.user.attribute.changed element.has.user.attribute.changed.removed.values 2 manager newManager element.type.has.user.attribute.changed element.has.user.attribute.changed.added.values 3 manager ]]> lanid exists 0 lanid NOT_EQUALS ]]> if manager changing 0 adMangerSyncLoopVariable EQUALS adMangerSyncLoopVariable2 EQUALS ifManagerChanging EQUALS true set oldmanager variable action.name.set.string.variable action.string.variable.value 0 oldmanager {'oldManager'} set newmanager value action.name.set.string.variable action.string.variable.value 1 newmanager {'newManager'} Set adMangerSyncLoopVariable action.name.set.string.variable action.string.variable.value 2 adMangerSyncLoopVariable complete loop action.name.change.process.flow action.flow.change.redo.policy 3 if manager changing (second run) 0 adMangerSyncLoopVariable NOT_EQUALS adMangerSyncLoopVariable2 EQUALS ifManagerChanging EQUALS true Set newlandn action.name.set.string.variable action.string.variable.value 0 newlandn {'landn'} Set AD manger attribute action.name.set.accounts.data action.ace.accounts.set 1 ActiveDirectory {'getADAccount'} manager newlandn Set adMangerSyncLoopVariable2 action.name.set.string.variable action.string.variable.value 2 adMangerSyncLoopVariable2 complete loop2 action.name.change.process.flow action.flow.change.redo.policy 3 if manager changing (third run) 0 adMangerSyncLoopVariable NOT_EQUALS adMangerSyncLoopVariable2 NOT_EQUALS ifManagerChanging EQUALS true Set AD manager attribute action.name.set.accounts.data action.ace.accounts.set 0 ActiveDirectory {'getADAccount'} manager newlandn ]]> exception.behaviour.fail_policy exception.behaviour.fail_policy