Is it possible to automate or script within active directory when a standard account has been disabled

Is it possible to automate or script within active directory when a standard account has been disabled and to disable any other account for the user using the ExtensionAttribute within AD?

Parents
  • Hi  

    Yes, the easiest way to do this would be with a Workflow, with a trigger condition(s) when the standard account is disabled.

    The workflow itself would contain a Search activity step. For instance if you store the standard users "object GUID" or "employeeID" in ExtensionAttribute1 of Admin or Privileged accounts. IE

    Then add for example a deprovision step within the Search activity.

    Just ensure that you modify the Activity Target of the Deprovisioning step to be the Found Object from the search activity step

Reply
  • Hi  

    Yes, the easiest way to do this would be with a Workflow, with a trigger condition(s) when the standard account is disabled.

    The workflow itself would contain a Search activity step. For instance if you store the standard users "object GUID" or "employeeID" in ExtensionAttribute1 of Admin or Privileged accounts. IE

    Then add for example a deprovision step within the Search activity.

    Just ensure that you modify the Activity Target of the Deprovisioning step to be the Found Object from the search activity step

Children
No Data