AD Account Discovery Description Field

[PeterCCH]

Most of the Active Directory users that we are importing using Passwordstate account discovery have a detailed explanation of what that account is used for in the Active Directory description field.  Is there a way to pull that field into the Passwordstate description instead of the default "Active Directory Account for domain [DomainFQDN]" description?

[support]

Hi Peter,

 

Unfortunately in the Account Discovery job there is no possible way to synchronise those description fields.  That Description Field is just a generic Description field that we use for many different types of Passwords in the system, and therefore the Account Discovery Job was never really designed to sync that data from the Description field in AD.

 

I do have a possible work around for you though, which will include some custom scripting:

 

If you were to use a script to query the user in Active Directory and store the description data in memory, you could then use that information to update the Password Record using our API.  Information about updating an existing Password using our API can be found under Help -> Web API Documentation, but a example script to update the Description field is as follows:

 

$Description = "Results from AD query"

#JSON data for the object
    $jsonData = '
    {
	"PasswordID":"46411",
	"Description":$Description,
        "APIKey":"<apikey>"	    
    }
    '

    $PasswordstateUrl = 'https://passwordstate/api/passwords'
    $result = Invoke-Restmethod -Method Put -Uri $PasswordstateUrl -ContentType "application/json" -Body $jsonData

 

You may have also dynamically find the Password ID but that is also possible to search for it using the API using an example like below

 

$Username = "contoso\jbloggs" #this username data should come from a query from Active Directory

$PasswordstateUrl = "https://sandbox.halox.net/api/searchpasswords/?username=$Username"
$Results  = Invoke-Restmethod -Method GET -Uri $PasswordstateUrl -Header @{ "APIKey" = "4ca37695823bdfe9285afe3bc3467d87" }
$Results.PasswordID

 

I hope this helps!

 

Regards,

Support

[PeterCCH]

Thank you very much!  I'll work on putting together a script with your examples

[ROBEL IT]

Hello,

 

this is exaclty what I am looking for. Unfortunately i'm really not into APIs and Web-stuff. Can someone provide a more detailed explanation of what to do in Powershell?

 

Would be great, thank you!