Wednesday, January 2, 2013

Interact Intranet: Active Directory account synchronization

Synchronization of Active Directory accounts can be a bit tricky so hopefully this chart comes in handy for some customers.  This relates to version 5.1.5 and might not apply to future releases.

Domain Checkbox
"Deactivate Non-Group Members?"		If you do this to an AD account...This is what happens to your Interact account...
UncheckedDisableDeactivated
DeleteRemains active
Remove from sync groupRemains active
CheckedDisableRemains active
DeleteDeactivated
Remove from sync groupDeactivated

NOTE: Interact cannot be configured to automatically delete users. If you want to delete a user from Interact you must do it manually through Site Admin.

3 comments:

  1. UnknownJanuary 4, 2013 at 10:29 AM

    Just a note about deleting a user - if you delete a user account you also delete any document they created. safer to disable the account as it doesn't use a license then anyway.
    Mark

    ReplyDelete
  2. Geoff GarciaJanuary 4, 2013 at 10:35 AM

    Thanks so much for sharing Mark, I wasn't aware of that and will definitely be mindful not to delete any accounts going forward!

    ReplyDelete
  3. PeterJanuary 9, 2013 at 3:21 PM

    Something else that I've learned in the past week as setup our new Intranet:

    We had some extra test and system accounts being imported into Interact, but didn't want them to display on the site (or use up a license). We tried marking those accounts "inactive", only to find that the next overnight synch from AD restored their access. So, we needed to also uncheck the "Synchronise" box on those profiles, to prevent this from happening. Now, those accounts stay hidden.

    Peter

    ReplyDelete

Subscribe to: Post Comments (Atom)