You can certainly have that data presented through Ivanti's interface, assuming the data you wish to show exists and can be queried from Service Desk. For example, I'm assuming there is a field in AD showing the date and time when each user's password is set to expire, correct? If that is the case, you should be able to query this field.
Please see the following documentation on working with external data sources: https://help.ivanti.com/ld/help/en_US/LDSD/11.0/Default.htm#028 DesignIdeas/Working with External Data.htm%3FTocPath%3DDesign%2520and%2520administration%7CDesign%2520Ideas%7C_____16
Contained in our Help Center, you'll also find anything you need on building new queries on external data sources, importing the data if that is what you require, or presenting that data on live dashboards, etc...
Product Support Engineer
Yes there is a field in AD that provides that information. I however am having trouble running a report again active directory accounts and attributes. Is there documentation on running reports against Active Directory.
you can create query using console to report on AD and check for expiry date for each one , if you have in AD an attribute defined that.
or you can pull these data in report directly form that source
There is a attribute in AD for that, I am however unable to locate a way to define one in the console or check to see if it is part of the LDAP import.
I am researching your question as I have the same question. Please let me know if you find out anything on your side.
you can query your AD connection using the Console and then the Query and Report Designer. Choose your AD connection and connection type as object to query and then select all attributes, to see the data behind the attributes.
If you do not find any matching attribute, you might have to enhance your connection to the AD and select a few more attributes to show/import.
If you don't know what attribute to choose from, here are a few helpful resources, I came across:
SelfADSI : The ADSI Scripting Tutorial / The LDAP Scripting Tutorial - A site in English and German, about LDAP and ADSI. The LDAP filter section is particularly helpful.
User Attributes - Inside Active Directory - An almost complete list of the user's attributes in AD with names and data types.
I am not seeing the field i need to run the report on in that list.
What i am looking for is :
The password expiration date is not an attribute on the user object. It is a calculated value based on the sum of pwdLastSet for the user and maxPwdAge of the user's domain. To get the password expiration date, get the IADsUser.PasswordExpirationDate property. You cannot modify this attribute for a user; instead, set the IADsDomain.MaxPasswordAge property to change the setting for the domain.
Taken from -User Security Attributes (Windows)
OK then, maybe we can do the same as the AD and calculate the value.
Check the data types and look if you're able to calculate with these values. If yes, you can add three more attributes to your User Object.
Of course you can name them as you like. Now set an before save calculation on the third attribute that will calculate the value you need. Set the dependency to the other two attributes and the last update date attribute. and everytime the import runs, or the value of the first two attributes are changed, the calculation will fire and save the value to the third attribute. Add the attributes to windows as needed and you should be able to see the value as in your AD.
Have a try and let us know if it works!
I can calculate what I need off of ADpwdLastSet, however that is not an available attribute for me to add to the user object.
try using the LDAP to connect to your AD instead or in addition, because you can add all possible attributes to the import. That is how I've done some more complicated imports.
Check this article: How to import users via LDAP including Custom Attributes
Have a try!