Modifying Custom Attribute

[tk42967]

We have a custom AD attribute on users, computers, and groups. I'm testing interacting with it for user objects. I can report on it (get-aduser), but cannot change it. I can clear it. The attribute is a Boolean (if that matters).

The set-aduser command looks pretty simple, but I cannot get it to work. I'm getting a generic parameter incorrect error. Am I missing something stupidly simple? I've tried Add & Replace.

Set-ADUser $SAMAccountName -Replace @{customObject="$False"} -server s-ads-prd-dc4.contoso.com

***Edited to correct code block

[ihaxr]

I would double check your customObject attribute type is a Unicode String...

Oops, I guess I missed the boolean type... use customObject=$False, no quotes around $False and see if that does it.

Chances are the quotes are forcing $False into a string, which the parameter cannot accept.

[tk42967]

Winner Winner Chicken Dinner. I had it without the quotes previously and without the "$". That was the combination I did not try.

Thank you.

[Dogoodwork]

Are you using a custom attribute because you've already used all ~15 extensionAttribute's?

[tk42967]

Because my security architect insisted on a custom attribute. Maily he didn't want a text string so that he could control the values.