Hello,
I need to update the "XIsInEffect" field of the "ADSAccountInADSGroup" table. When an employee is deactivated I need to have the AD account activated and I add some AD groups and other groups are deallocated. These unassigned groups, if the employee is activated, you need to reassign them
My idea is update the "XIsInEffect" field of the "ADSAccountInADSGroup" table for deallocated. But i have the error:
You cannot change values of read-only objects.
Is it possible?
Greetings.
Hi,
You absolutely should not touch XIsInEffect directly.
You should use the flags on the manage levels to control this:
In my case the retain groups flags are unchecked meaning that XIsInEffect will be set to 0 in these cases. If you want to retain the group memberships you should check the retain groups boxes. Note this is for ALL groups ... you cannot retain some and not others with this approach.
These work off the AccountDisabled flag which OOB reacts to the IsInActive flag on the employee/identity.
HTH, Barry.
Hi,
You absolutely should not touch XIsInEffect directly.
You should use the flags on the manage levels to control this:
In my case the retain groups flags are unchecked meaning that XIsInEffect will be set to 0 in these cases. If you want to retain the group memberships you should check the retain groups boxes. Note this is for ALL groups ... you cannot retain some and not others with this approach.
These work off the AccountDisabled flag which OOB reacts to the IsInActive flag on the employee/identity.
HTH, Barry.
