This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to get rid of entries in ADSOtherSID, ADSOtherSIDInADSGroup and DPRAttachedDataStore when accounts have been deleted in Active Directory

Hi,

Accounts not in scope that used to be members of groups in scope have been deleted in AD. Daily sync - pretty much OOTB except only users and groups are being synchronized - does not remove these obsolete entries.

How can we get rid of them? We're using version 7.1.1

Kind regards,

Vesa Vatka

0 Trevor Pike over 7 years ago

Hi Vesa,

Not clear on what you mean here. These are accounts from a domain that is not synced? or simply you have defined a scope, but OU for example, that the users are not contained in?

As per the following, these should be getting cleaned up by the built in tasks: support.oneidentity.com/.../what-do-the-ad-component-tasks-maintainothersid-and-cleanupothersid-do-.

Trevor
Cancel
Up 0 Down

Cancel
0 Vesa Vatka over 7 years ago

Hi Trevor,

The domain is synced allright. User accounts were originally in an OU that was not part of the scope. But as they were members of the groups that were indeed part of the scope, they ended up in ADSOtherSID and the other mentioned tables.

Now, those accounts have been deleted alltogether from the AD but somehow the sync does not recognize them. Or it does, I can see the those scripts from the link you mentioned being run if I run the sync manually but still nothing happens.

Vesa
Cancel
Up 0 Down

Cancel