Forum Discussion

evinfo's avatar
evinfo
Level 4
14 years ago

Compliance Accelerator and AD Integration

All - When our users leave the company, we put the users in AD into a "Disabled OU" and delete account after 30 days of being in "Disabled OU". Unfortunately when the AD synchronization occurs from...
  • Kenneth_Adams's avatar
    14 years ago

    The EndDate is populated by CA when the user is removed from a Department.  That occurs automatically, so don't be concerned about synchronizing it with AD.

    As for the Monitored Employee still attempting to synchronize with AD, CA 8 and above has a configurable setting to automatically stop the synchronization attempts after 30 days by default.  This configuration setting is in place so that any temporary issues with AD access are not cause for unintended synchronization removal.  Once the synchronization option is unchecked, CA won't ever try to synchronize the account again unless someone goes in and enabled the synchronization again.

    Ken