Home > Blogs > VMware vCenter Orchestrator Blog > Monthly Archives: May 2011

Monthly Archives: May 2011

Creation of User Accounts with Active Directory Plug-in for VCO

A few days ago we announced the GA of Active Directory Plug-in for VCO. Now we want to show you an example how this plugin can be used.

Suppose you are an Active Directory administrator and you have to create a lot of new accounts for a newly created department of your company with a lot of employees. If just using the UI that your Windows 2008 server has for working with AD objects, you have to do a lot of annoying and repeating steps, but you have the VCO and the AD plug-in on your side 🙂

Let’s see how to do this job with the help of Active Directory Plug-in 1.0.0 for VCO 4.1

As the configuration of the AD plugin is not a topic of this blog post I'll skip it.

So… What is the criteria that we will observe to see if our exemplary Workflow has finished successfully?

  1. We will expect that after a successful run of our custom Workflow there will be a new object for the department – object of type Organizational Unit
  2. We will expect to have a User Group object that all newly crated User Accounts belong to, thus making it easy for the admins to grant permissions to all the users in this group
  3. We will expect to have one or more exemplary User Account created

Now when we have the goal and the criteria lets see how we can achieve it with custom Workflow that uses the Basic Building Blocks of the Active Directory Plug-in 1.0.0 for VCO 4.1

Here is an example of steps that our Workflow should repeat in order to fulfill the above requirements:

Step 1– Creation of Organizational Unit entity

  • Check if there is an Organizational Unit entity already created for the new department of your organization
  • If not it will be crated

Step 2 – Creation of User Group and associating it with newly created OU

  • Check If the User Group already exist and use it
  • If there is no such User Group then we should create it

Step 3 – Creation of user and associating it with newly created OU

  • New user account is created
  • Newly created user account is associated with the Organizational Unit created on Step 1

Step 4 – Add the user to the User Group

The following screenshot shows a possible implementation of the above steps


Lets now start this example and see what will be the result

First lets check how does the inventory tree look like before the run


Now it is time to start the Workflow and observe it during run-time

Filling the Input Parameters…


Workflow during run time…


…And the successful Finish 🙂 …


Now it is the time to look at the results…


This is it…

There is an Organizational Unit called "Workflow Development" with two objects inside. One of it is the User Account "johnsmith" and the other one is the User Group "Workflow Developers"

… so we can conclude that we meet our success criteria 🙂

You can check the official product site  and the user guide for more info. 

vCenter Orchestrator Plug-in for Microsoft Active Directory now released

We are extremely pleased to announce the General Availability of the VMware vCenter Orchestrator Plug-in for Microsoft Active Directory!  
The VMware vCenter Orchestrator plug-in for Microsoft Active Directory allows organizations to automate the management of directory services tasks, particularly as they pertain to cloud provisioning use cases. For instance, the plug-in enables the automatic provisioning of vCloud Director organizations based on data retrieved from Active Directory. The plug-in also includes many administrative actions around computers, organizations, user groups and users, such as resetting passwords or adding users to a user group.

What versions of Active Directory are supported?

  • 2003
  • 2008

What versions of vCenter Orchestrator are supported?

The plug-in runs on VMware vCenter Orchestrator 4.1.x.

How many workflows and actions are there?

  • Total number of Actions = 14
  • Total number of Workflows = 32

What can the users do with the Active Directory Plug-in 1.0.0?

  • Browse Users, Computers, Groups and Organizational Units in an Active Directory multi-domain forest
  • Run pre-defined workflows like creation of Users, changing user Passwords and a lot more.
  • Create new custom actions and workflows that serve better to their scenarios.

Where can I find more details about the Active Directory Plug-in 1.0.0?
Below are some resources to help you better understand the value and scope of the Microsoft Active Directory plug-in: