In my 6.5.0.2656 environment, I have a PowerShell script that does some validation upon group membership changes, based on this add-on, but mine uses VAs instead of policy parameters. The last part of the script checks that the object is located under one of the containers listed in the VA on the group object. The VA is multi-valued. If the attribute has 1 entry, the script works. If the attribute has more than 1 entry, the script returns the error message stating the object isn't located under a valid container. If I take the code out of ARS and run it in the PowerShell ISE, it works fine. Another weird point, I have a function that outputs to an Event log. When I make changes, nothing is output to the logs, but I'll see other user's actions output to the log. I've been beating my head against the desk all day trying to figure this out, so if anyone has ideas, please let me know. I've included the code as it runs in ARS and in ISE as separate files.
↧