Disabling SN account swhen AD account is moved to the disabled user OU

daniellethomson · ‎01-31-2017

The OoB functionality to disable SN accounts if the corresponding AD user account is disabled works perfectly, except in our environment. Our current process is to move the accounts to another OU=disabled users. I looked at other options such as tracking the last refresh time of the account but we need a more immediate option. Is there a way the OoB script can be modified to disable the SN user account if the OU changes/if the account is no longer visible in the user OU?

bjhughey164 · ‎02-01-2017

Danielle,

I have a data source for each OU that I need to import even though they're all pulling the same attributes. In our environment, a user can move from one to another depending on their job role so, I need to capture all of this, right? The terms hit their own OU during that process and have to remain there for X amount of days based on corporate policy. So, I just pull that termed OU as it's own source and then run the script above.

When you do the imports this way, you can also get granular reporting on just that data source and you're also able to troubleshoot specific users and groups more effectively than doing one giant pull.

View solution in original post

daniellethomson · ‎02-02-2017

Mark- I created an OU Definition for our disabled user OU and its not bringing back that OU. Could you guide me in the right direction? Share some of your OU definitions when you get them built so I have an idea if I'm on the right track?

Mark_Bailey · ‎02-02-2017

I've not done it just yet, so I can so you the exact screen shot, but I am pretty certain it will work, because I have brought in other OU's before.

There are two Marks so your probably asking the other but below Highlight where the specific OU is defined.

bjhughey164 · ‎02-02-2017

I am doing this in production currently.

daniellethomson · ‎02-02-2017

Thansk Ben. I found out it wasn't an issue with SN but currently our DFS is broken. Being fixed this weekend. I think I have everything working as expected.