Update Active Directory Account Template Containers using etautil - Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

Bulk updates to Active Directory account template containers can be performed programmatically using the etautil command-line utility. This method is effective for managing environments with numerous account templates that require container path modifications.

 

 

 

Environment

• Product: CA Identity Manager
• Version: 14.5
• Component: Provisioning Server / Account Templates

Cause

Many of our customers have hundreds of account templates and may need to be updated grammatically. This can be done with the etautil command.

Resolution

 

To update the account container for an Active Directory account template, follow these sequential steps:

1. Identify the specific account template to be modified (e.g., APJ_SUPPORT).
2. Open a command prompt on the Provisioning Server.
3. Execute the etautil command using the following syntax to update the container path:

 

etautil.exe -u superuser -p [password] update 'eTADSPolicyContainerName=Active Directory Policies,eTNamespaceName=CommonObjects' eTADSPolicy eTADSPolicyName=APJ_SUPPORT to AccountContainer='(eTTelephone=3334489);eTADSOrgUnitName=SUPPORT,eTADSOrgUnitName=APJ;'

4. Verify that the "Account Container" field in the template properties now reflects the updated Organizational Unit (OU) structure, such as eTADSOrgUnitName=SUPPORT,eTADSOrgUnitName=APJ.

 

 

Additional Information

• Ensure that the superuser credentials or an account with equivalent provisioning permissions are used.
• The AccountContainer attribute must follow the specific X.500 naming convention used within the Identity Manager provisioning store.