Custom Schema for GCPW and AD user association.

[Adam Strugatch]

I'm not sure if this is something better scripted with GAM or done with GCDS. 

The article about associating accounts references both the API (assuming that means it's possible with GAM) and GCDS but doesn't give any details.

Has anyone done this either way?

(https://support.google.com/a/answer/9796679#zippy=%2Cenrollment-flow-on-an-ad-domain-joined-device%2Csync-with-gcds%2Cadd-in-the-admin-console) 

[Adam Strugatch]

I see the conversation here: https://groups.google.com/g/google-apps-manager/c/9956JUoMmo0/m/m-cjDPk-AwAJ But don't see a consensus on the process. Especially as something repeatable

[Adam Strugatch]

For anyone looking in the future. Doing this with GCDS doesn't make sense as there isn't an appropriate existing attribute to sync from AD. Instead what I've done is this:

Schedule an export from AD that includes mail and sAMAccountName.

10 minutes after that export I run the following batch:

@ECHO OFF

gam csv C:\GamWorkingDir\usersAttrib.csv gam update user ~mail Enhanced_desktop_security.AD_accounts multivalued DOMAIN\~~sAMAccountName~~

DEL "C:\GamWorkingDir\usersAttrib.csv" /Q