• State Suggested Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 93 subscribers
  • Views 2434 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

What is the way to add AD group membership to a disable person

Nur
over 4 years ago

Hi 

I have an requirement to assign two ads group to a disable person. 

I have written a script to add the groupmembership (ADSAccountInADSGroup), It seems like it is not possible to add as user account is disable.

It is complaining in xIsInEffect column which is derived by xOrigin column. 

Is there any way I can add group membership to a disable account and push it to target? Thanks

Parents
  • 0 over 4 years ago

    So, I assume that you AD User is a managed one means that he has an account definition assigned and an automation (manage) level? If so, I assume that you have configured those to not allow the membership to become valid. The system is just doing what you have configured it to do.

    One option would revert the account to a linked only account. Then, the membership should become active.

  • 0 over 4 years ago in reply to Markus Weiss-Ehlers

    Thanks Markus for your reply. Yes, the AD user has the account defenation and fully managed. Please see the option I have in the manage level. Do I need to on the option "Retain groups if permanently disabaled"? Do you have any technical documentation where I can get an example how to revert account to a linked only account. 

Reply
  • 0 over 4 years ago in reply to Markus Weiss-Ehlers

    Thanks Markus for your reply. Yes, the AD user has the account defenation and fully managed. Please see the option I have in the manage level. Do I need to on the option "Retain groups if permanently disabaled"? Do you have any technical documentation where I can get an example how to revert account to a linked only account. 

Children