How Ivanti Environment Manager Can Trigger an Ivanti Automation Task to Make a Change in AD Using an Automation Connector


For former RES customers, it has always been possible from within Ivanti Workspace Control (formerly RES ONE Workspace), to launch Ivanti Automation tasks based on specific triggers occurring, for example, adding a user to a specific AD Group:

edit automation task - settings - properties - screenshot

These automation tasks can be used to remove unnecessary burden on the IT department by automating common tasks that users require – thus saving IT time and money.

Below we discuss how Ivanti Environment Manager (formerly AppSense Environment Manager) can also be used to trigger Ivanti Automation Tasks.

With Ivanti Automation, it is possible to use Automation Connectors to configure automation tasks to achieve different outcomes.  These automation tasks can now be triggered using the forthcoming version of Ivanti Environment Manager’s new Automation Action which communicates with an existing Automation Dispatcher to initiate configured tasks on-demand, as required.


We will use the same example as above – to add a user to an AD Group when a specific trigger occurs – this will be when a user launches WordPad.exe. This change in AD Group Membership could perhaps then be utilized to provide access to a certain file share or printer for a user.

In this example, a WordPad Users group exists in Active Directory (AD) but currently contains no users:

active directory users and computers - groups - wordpad users properties - members - screenshot


The Ivanti Automation Console is used to create an Automation Module that manages a specific Active Directory Group.

This is achieved by providing details of the relevant domain, including the WordPad Users group for which we want to manage membership:

manage active directory group - settings - screenshot

From the Members tab, we specify the user we wish to add to the AD Group when the automation task is instigated:

manage active directory group - members - screenshot

That’s it from an Automation perspective!


We will now utilize Ivanti Environment Manager to trigger the task via an Automation Agent installed on a Windows 10 desktop.

In this instance we will use a Process Started trigger - other triggers are available including, but not limited to, Computer Startup/Shutdown, User Logon/Logoff, Session Connect/Disconnect or Session Lock/Unlock - to configure when the Automation Task applies.

This is achieved by first specifying where the Automation Dispatcher resides and under which context we want to run the automation task:

configuration on W10 - environment manager - automation settings - policy configuration - screenshot

Next, a Process Started node is created and Wordpad.exe is specified as the starting application:

policy configuration - node - user process name - screenshot

Once added, an Automation Action needs to be configured beneath the User Process Name Condition:

file - actions - policy configuration - node - create an automation task - modules - screenshot

From here, we can select the automation action Manage Wordpad Users Group created earlier in Ivanti Automation:

file - actions - policy configuration - node - automation screenshot

Once selected, this will appear beneath the User Process Name Condition on the Process Started Trigger:

file - actions - policy configuration - node - automation screenshot

The Environment Manager Configuration can now be saved and deployed to the Windows 10 endpoint.


A user logs on to the Windows 10 desktop and launches WordPad.exe.

WordPad.exe runs and the Automation Task configured is executed immediately.

On the Administrative endpoint, within Active Directory Users and Computers, User1 will now be visible within theWordPad Users AD Group:

active directory users and computers - groups - wordpad users properties - members - screenshot

To see a short video of this in action, please follow this link.

ivanti - 5 reasons you need user workspace manager