0 votes

I would like to delete users that have been disabled for more then X number of days.

This would be a phase of our deprovisioning process. The user is first disabled and placed in a "disabled" ORG unit. After the account sits in this ORG unit for X number of days and we are sure that we no longer need it, I would like to automaticially delete it.

by (380 points)

1 Answer

0 votes
by (270k points)

Hello,

To achieve the desired, you need a business rule triggering After disabling a user account and a scheduled task. The rule will set a custom date attribute to a future date by adding the required number of days. When the time comes, the scheduled task will delete the user. Finally, you should have something like the following:

Business rule image.png Scheduled task image.png

0

I ended up using "CustomAttributeDate3" so I could run additional logic. I added a date stamp to CustomAttributeDate3 when the account is suspended/disabled. From there I can trigger additional scheduled actions such as deleting the account automaticially after 60 days using '%datetime,-60%'. It all seems to work now. Thanks!

0

Hello,

Thank you for the confirmation. For your information, CustomAttributeDate1 was just an example. You can use any of Adaxes custom date attributes that are not involved in other workflows.

Related questions

0 votes
1 answer

I have to do a weekly Inactiviy Report for Accounts that have not logged in for 30 days or more. 1 of the reports is for Internal users BUT there is an Account ... Adaxes and working on the product, and i need to get all my reporting done through Adaxes

asked Nov 14, 2022 by dtorannini (80 points)
0 votes
1 answer

We have four OUs in Active Directory (Pending Deletion, Disabled with Mail Delegates, Disabled with HR Extensions and Disabled_Temp_Leave) that users are moved to prior to their eventual ... past 7 days have been moved to one of 4 of these OUs. Thanks!

asked Jun 3, 2021 by RayBilyk (230 points)
0 votes
1 answer

In the web interface, I would like to display the "Distinguished Name" property but it is not showing it as it would when using ADUC or even in the Adaxes Admin Console. Is ... I would like it to display like this: CN=Mark Smith,OU=Sales,DC=Fabrikam,DC=COM

asked Jan 15, 2020 by mark.it.admin (2.3k points)
0 votes
1 answer

Hi, we currenlty have a business rule to send an email everytime the Title, Manager, Department, accountExpires, EmployeeType or FirstName attributes are ... Unit: %BusinessUnit% End Date: %accountExpires% Effective Date of Change: %adm-CustomAttributeDate2%

asked Feb 14 by KevC (60 points)
0 votes
1 answer

As part of our PCI compliance, we need to create a report of all the user accounts that are expiring in the next 30 days and email that to a user who compiles ... I was hoping to utilize Adaxes to automate it. Any assistance would be very much appreciated.

asked Apr 1, 2013 by danftasc (440 points)
3,326 questions
3,026 answers
7,727 comments
544,678 users