Capture Delete Account events in Active Directory -Terminate User

Question

Capture Delete Account events in Active Directory -Terminate User 
 I want to terminate (LOGIN_DISABLED = TRUE) a user who was DELETED in Active Directory. I am able to make user terminated (LOGIN_DISABLED = TRUE) when an account in AD was disabled. I want to have the same capability on the DELETE event as well. 
 Can you please guide me on how to accomplish this?

Geoffrey Carman · Accepted Answer

When posting trace like this, you always start with the input document, then the processing of it, then the error. 
 You are trtying you use the association of the event, but I forget what it looks like but I bet you do not have it in the doc in the <association> node. Probably need to to use XPATH of ./text()

Oguz Alkisoglu · Answer

Hello, I have found a solution implementing this requirement. What I did was to create a separate policy under Publisher - Event Transformation package. In the policy, I have used

true

As action and in Condition I have put modify|delete. The reason I have used modify is after I create the policy in Event Transformation container, I have realized that the operation turned into modify. I was delete before when my policy is in Publisher-itp.

Zan · Answer

There is sub-ctp-entitlementImpl policy that does just that with one of it's rules in AD, I recommend you just copy that rule (change conditions of execute), you could even turn on entitlements and use integrated default policies...

Menu

Identity Manager Discussions

Capture Delete Account events in Active Directory -Terminate User

Tags:

Top Replies

Resources