The number of days left before the expiration of the account, for which the property is calculated. This property can be used to notify users about their account expiration. For example, you can specify the following pattern in the notification text: You account expires in %adm-AccountExpiresDaysLeft% days.

Specifies whether a user can change the password for their own account.

The date and time at the moment, when the property is calculated. For example, this property can be used to set the Account Expires value. If you specify the value reference %datetime,+1M% for the Account Expires property, accounts will expire in one month after the date, when the value is set.

The number of days a user does not log on to the system or computer remains turned off. This property can be used to automate processing of inactive accounts.

The period of inactivity is reliable only if it is more than 7 days.

The DN of the user, who performed the operation that resulted in the property resolve.

The GUID of the user, who performed the operation that resulted in the property resolve.

The DN of the domain, where the operation initiator is located. For example, if you specify the following value: CN=Users,%adm-InitiatorDomainDN%, the value reference %adm-InitiatorDomainDN% will be replaced with the DN of the domain of the user, who performed the operation that resulted in the property resolve. So, if this user is located in the domain example.com, the resulting value will be CN=Users,DC=example,DC=com.

The e-mail of the operation initiator.

The first name of the operation initiator.

The full name of the operation initiator.

The last name of the operation initiator.

The DN of the manager of the user who performed the operation resulting in the property resolve.

The e-mail of the manager of the operation initiator. This property can be used to send e-mail notifications to the manager of the user, who performs the operation. For this purpose, specify the notification receiver as follows: %adm-InitiatorManagerEmail%.

Manager is specified in the 'Manager' property.

The first name of the manager of the operation initiator. Manager is specified in the 'Manager' property.

The full name of the manager of the operation initiator. Manager is specified in the 'Manager' property.

The last name of the manager of the operation initiator. Manager is specified in the 'Manager' property.

The mobile of the manager of the operation initiator. This property can be used to send SMS messages to the manager of the user, who performs the operation. For this purpose, specify the SMS receiver as follows: %adm-InitiatorManagerMobile%.

Manager is specified in the 'Manager' property.

The phone number of the manager of the operation initiator.

Manager is specified in the 'Manager' property.

The logon name of the manager of the operation initiator. Manager is specified in the 'Manager' property.

The mobile of the operation initiator. This property can be used to send SMS messages to the user, who performs the operation. For this purpose, specify the SMS receiver as follows: %adm-InitiatorMobile%.

The DN of the OU/container, where the operation initiator is located.

The SID of the operation initiator.

The logon name of the operation initiator. This property can be used to insert information about the user, who initiated the operation. For example, you can specify the following pattern Created by: %initiator% for the Description property via a Business Rule that is triggered after object creation. In this case, the description of new objects will contain logon names of the users, who created these objects ('Created by: johndoe@company.com').

Specifies whether the manager of a group can add and remove members to and from the group using tools like Outlook and Active Directory Users and Computers.

The DN of the Active Directory domain of the object for which the property is calculated.

The DN of the OU/container that holds the object for which the property is calculated.

The name of the parent object in the Active Directory hierarchy. For example, if an object is located in the Organizational Unit named MyOU, the value of the adm-ParentName property will be 'MyOU'.

The e-mail of user's manager. This property can be used to send e-mail notifications to the manager of a user. For this purpose, specify the notification receiver as follows: %adm-ManagerEmail%.

Manager is specified in the 'Manager' property.

The first name of user's manager. Manager is specified in the 'Manager' property.

The full name of user's manager. Manager is specified in the 'Manager' property.

The last name of user's manager. Manager is specified in the 'Manager' property.

The mobile of user's manager. This property can be used to send SMS messages to the manager of a user. For this purpose, specify the SMS receiver as follows: %adm-ManagerMobile%.

The phone number of user's manager.

The logon name of user's manager. Manager is specified in the 'Manager' property.

The description of the current operation. For example, using this property, you can include the description of the operation that triggered the Business Rule into e-mail notifications. For this purpose, you need to insert the %adm-OperationDescription% value reference into the template of an e-mail notification. In this case, e-mail messages will contain the detailed description of the operation that triggered the Business Rule. For example, the description of the telephone change operation will be as follows: Modify 'John Doe (example.com)': set Telephone Number to '555-555-555'.

The date and time of the password expiration of the account for which the property is calculated. When this property is calculated, the Default Domain Password Policy and Fine-Grained Password Policy are considered.

The number of days left before the expiration of the password of the user, for which the property is calculated. This property can be used to notify users about their password expiration. For example, you can specify the following pattern: Your password expires in %adm-PasswordExpiresDaysLeft% days.

Indicates whether an object is protected from accidental deletion.

The property returns a random integer.

The property returns a random text of 256 characters. For example, this property can be used to set the user logon name to a random value as a part of deprovisioning process. If you specify the value reference %adm-RandomString,20% for the user logon name, it will be replaced with a random text of 20 characters in length.

The URL of the Web Interface specified for the Adaxes service. For example, this property can be used in e-mail notifications to insert links to the Adaxes Web Interface.

The message text of the first error that occurred during operation execution. The property can be used in Business Rule actions only. For example, you can use the property to include error message into notifications sent to system administrators when an error occurs. To do so, include the following template into the notification: %adm-OperationError%.