• State Verified Answer
  • Replies 3 replies
  • Subscribers 95 subscribers
  • Views 893 views
  • Users 0 members are here
Options
Related

How to perform a reconciliation of Active Directory

daniell kilian_72010
7 months ago

Hi

Is there a report available that we can use to tell us differences between what One Identity believes is in Active directory (ADSAccount) and what is actually in Active directory?

For example: We have identified quite a few ADSAccount records where data changes was not provisioned to Active directory via the connector. We know why this is happening and want to clean up the discrepancies, hence a requirements for the report. We can easily get changes applicable to one user account by executing the object templates on said adsaccount record, but instead of dealing with them one by one we would like to see all differences

  • +1 7 months ago

    Hi Daniell,

    you may use the synchronization simulation in "Synchronization Editor" tool. It can be found in section "Start up configurations" as button on each configuration (near the "Run" button). If you reset the revision counter for all objects of interest this simulation will create a report of operations at property level.

    Regards,

      Tino

  • 0 7 months ago in reply to tlindner

    Perfect Thanks Tino

    That resolved part of my issue. I also realized that we will have to still execute templates on all our fully managed ADSAccounts to push those changes to AD, because the sync editor won't have those changes to compare against 

  • 0 5 months ago

    Yes, there is a report available that can be used to identify differences between what One Identity believes is in Active Directory (ADSAccount) and what is actually in Active Directory. This report can be generated by using the Synchronization Editor tool. To do this, follow these steps:

    1- Open the Synchronization Editor tool.
    2- Select the synchronization configuration that you want to run the report for.
    3- Click the "Synchronization Simulation" button.
    4- Select the "ADSAccount" object type.
    5- Click the "Run" button.

    The Synchronization Simulation tool will generate a report that shows the differences between what One Identity believes is in Active Directory and what is actually in Active Directory. The report will also show the changes that need to be made to synchronize the two directories.