Return
-
Title
Searches in a Workflow are not validating filters against edsvaParentDN or edsvaParentCanonicalName -
Description
When running a Search operation in a Change Workflow or an Automation Workflow, filters set against either edsvaParentDN or edsvaParentCanonicalName do not provide expected results. -
Cause
This behaviour is by design.
These are constructed attributes, and cannot be queried in bulk.
-
Resolution
WORKAROUND 1
With Windows Server 2012 R2 schema and above, it is possible to run a filter against msDS-parentdistname, which is a native Active Directory attribute which contains the DN of the parent container.
WORKAROUND 2
In an IF/ELSE branch within a search operation, it is possible to test against the parent container of the found object. The results can then be passed to a Saved Object and reports or operations can be run against the results of the Saved Object.