Microsoft Active Directory v2 Spoke
Create, delete, and manage objects in Microsoft Active Directory, such as users, groups, and computers.
Request apps on the Store
Visit the ServiceNow Store to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.
Integration Hub subscription
This spoke requires an Integration Hub subscription. For more information, see Legal schedules - IntegrationHub overview.
Spoke version
Microsoft Active Directory v2 spoke v2.5.3 is the latest version.
Supported versions
This spoke was built for Microsoft Active Directory.
Spoke requirements
Ensure that Active Directory Web Services (ADWS) is deployed in the same server where Microsoft Active Directory is installed. The MID server can access the Active Directory Web Services (ADWS) at port 9389. For more information about ADWS deployment, see Microsoft documentation.
In the MID Server and Microsoft Active Directory v2 server, run the following PowerShell commands to install the Active Directory module:
PS> Import-Module ServerManager
PS> Install-WindowsFeature -Name RSAT-AD-PowerShell
Spoke dependencies
If you’re having trouble installing the app, ensure that these dependent plugins are installed:
- Complex Object (com.glide.cobject)
- ServiceNow IntegrationHub Runtime (com.glide.hub.integration.runtime)
- IHUB Spoke Util Pack (com.snc.ihub_spoke_util_pack)
- ServiceNow IntegrationHub Action Step - PowerShell (com.glide.hub.action_step.powershell)
Note: If used outside the spoke implementation, some of these plugins are licensable features and require licenses.
Spoke actions
The Microsoft Active Directory v2 spoke provides actions to automate the tasks when events occur in your ServiceNow instance. Available actions include:
| Category | Action | Description |
|---|---|---|
| Group Management | Add Computer to Groups | Adds the computer account to one or more groups in the Active Directory \(AD\). |
| Add Computers to Group | Adds one or more computer accounts to the group in the Active Directory \(AD\). | |
| Add User to Groups | Adds a user to one or more groups in the Active Directory \(AD\). | |
| Add Users to Group | Adds one or more user accounts to the group in the Active Directory \(AD\). | |
| Create Group | Creates the group in the Active Directory \(AD\). | |
| Delete Group | Deletes the group from the Active Directory \(AD\). | |
| Does Group Exists | Checks whether the group exists in the Active Directory \(AD\). | |
| Is User in Group | Checks if an existing user is already a member of a group in the Active Directory \(AD\). | |
| Look up Group | Retrieves the group from the Active Directory \(AD\). | |
| Remove Computer from Groups | Removes the computer account from one or more groups in the Active Directory \(AD\). | |
| Remove Computers from Group | Removes one or more computers from the group in the Active Directory \(AD\). | |
| Remove User from Groups | Removes a user from one or more groups in the Active Directory \(AD\). | |
| Remove Users from Group | Removes one or more users from the group in the Active Directory \(AD\). | |
| User Authentication | Change User Password | Changes the user's password in the Active Directory \(AD\). The password has to match the AD password requirements. |
| Look up User Password Expiration Details | Retrieves the password expiration details for the user from the Active Directory \(AD\). | |
| Generate Random Password | Generates the random password according to the Active Directory \(AD\) password policy. | |
| Is User Locked | Checks the locked status of the user account in the Active Directory \(AD\). | |
| Reset User Password | Resets the password of the user in the Active Directory \(AD\). | |
| Unlock User | Unlocks the user account in the Active Directory \(AD\). | |
| Computer Management | Create Computer | Creates a computer account in the Active Directory \(AD\). |
| Disable Computer | Disables the computer account in the Active Directory \(AD\). | |
| Does Computer Exists | Checks the status of the computer account in the Active Directory. | |
| Is Computer Disabled | Checks the status of the computer account in the Active Directory \(AD\). | |
| Enable Computer | Enables the computer account in the Active Directory \(AD\). | |
| Look up Computer | Retrieves a computer account from the Active Directory \(AD\). | |
| Update Computer | Updates a computer account in the Active Directory \(AD\). | |
| Delete Computer | Deletes a computer account from the Active Directory \(AD\). | |
| Object Management | Create Object | Creates an object account in the Active Directory \(AD\). |
| Update Object OU | Updates the Organizational Unit \(OU\) of an object account in the Active Directory \(AD\). | |
| Update Object Expiration | Updates the account expiration date of the object account in the Active Directory \(AD\). | |
| Look up Object by Filter | Retrieves object accounts based on a search filter in the Active Directory \(AD\). | |
| Delete Object | Deletes an object account from the Active Directory \(AD\). | |
| User Management | Delete User | Deletes the user from Active Directory \(AD\). |
| Create User | Creates a user account in the Active Directory (AD) and sets a password.Note: From Microsoft Active Directory v2 spoke v2.1.1 onwards, these changes are applicable:
| |
| Disable User \(Conversational -ready\) | Disables a user account in Active Directory \(AD\). | |
| Does User Exists | Checks whether the user account exists in Active Directory \(AD\). | |
| Update User | Updates a user account in the Active Directory \(AD\). | |
| Enable User \(Conversational -ready\) | Enables a user account in Active Directory \(AD\). | |
| Look up User \(Conversational -ready\) | Retrieves a user account from the Active Directory (AD).Note: Now Assist for Conversational Spokes plugin is required to use the conversational ability of the action. | |
| Is User Disabled | Checks if the user account is inactive in Active Directory \(AD\). | |
| Get User Additional Fields \(Metadata\) | Retrieves information from the additional fields in a user account from the Active Directory \(AD\). |
Note: This spoke isn't tested with a load balancer.
Available conversational actions
Install Now Assist for Conversational Spokes and start using the conversational ability of Integration Hub spokes. For more information, see ServiceNow Otto for Conversational Spokes.
| Action | Usage |
|---|---|
| Disable User | In the Ask Now Assist to... field, enter the phrase that asks Now Assist to perform the action and press Enter. Disable user "Jack" in Active Directory. |
| Enable User | In the Ask Now Assist to... field, enter the phrase that asks Now Assist to perform the action and press Enter. For example, Enable user "Jack" in Active Directory. |
| Look up User | In the Ask Now Assist to... field, enter the phrase that asks Now Assist to perform the action and press Enter. For example, Look up user "Jack" in Active Directory. |
Lookup User action conversational ability in Now Assist panel
Available AI agents
Install Now Assist for Integration Hub and start using the available AI agents. For more information, see ServiceNow Otto for Integration Hub.
This spoke provides standalone AI agents that mimic human-like intelligence to perform tasks in your ServiceNow instance.
In the ServiceNow agentic system, you can create an agentic workflow that comprises of a set of large language model (LLM) instructions along with one or more standalone AI agents to execute an objective. See for information about adding AI agents to create agentic workflows as per your requirement and provide the required trigger.
You can also search for other available AI agents and add them to your agentic workflow. See Find AI agents for more information.
You can create a clone of the required spoke AI agent and customize it as per your requirement. See for more information about creating a clone.
- See for information about AI agents.
Available AI agents include:
| AI agent | Description |
|---|---|
| Microsoft Active Directory object manager | Manages object accounts in the Active Directory (AD) and retrieves their details. |
| Microsoft Active Directory user authenticator | Manages user accounts and passwords in the Active Directory (AD) and retrieves their details. |
| Microsoft Active Directory group manager | Manages groups in the Active Directory (AD) and retrieves their details. |
| Microsoft Active Directory computer manager | Manages computers in the Active Directory (AD) and retrieves their details. |
| Microsoft Active Directory user manager | Manages users in the Active Directory (AD) and retrieves their details. |
There might be AI agents installed with the Now Assist application that are not used in agentic workflows. To learn how to see all agents that are available to you, see Find AI agents.
Note: Ensure that the user running an AI agent has the required roles and permissions to access data or perform operations on data in the table that is associated with the AI agent.
Connection and credential alias requirements
Integration Hub uses aliases to manage connection and credential information. Using an alias eliminates the need to configure multiple credentials and connection information profiles when using multiple environments. If the connection or credential information changes, you don't need to update any actions that use the connection. For more information, see Connections and Credentials.
For information about setting up the spoke, see Set up the Microsoft Active Directory v2 spoke.
MID Server requirements
To use these actions, your instance must have a MID Server set up and configured to use PowerShell. For more information about running actions on the MID Server, see Integration steps. For more information about the MID Server, see MID Server.
To set up the MID Server for this spoke, see Set up MID Server for a spoke.
Note: You must install the MID Server and Microsoft Active Directory on different servers.