Note: As of version 8.3, it is now possible to ignore disabled users by checking a simple checkbox in the Options -> User/Group Sync page. The following article is relevant to releases prior to version 8.3.

When PaperCut NG / ChargeBack imports users from Active Directory it will import both enabled and disabled Active Directory users. This is the default behaviour because many organizations still wish to ensure disabled users exist in the PaperCut database as the users may only be disabled temporarily (e.g. for disciplinary reasons).

On the other hand, other organizations may disable accounts once users leave the organization. In this case, the designed behaviour might be to have these users automatically deleted from the PaperCut database. PaperCut NG can be configured to only import/sync enabled users. To do this:

1. Perform a backup
2. Navigate to the Options tab.
3. Press the Config Editor (Advanced) action on the left.
4. Find the user-source.config-arg property.
5. Change the value to enabled-users-only.
6. Press the Update button next the the config property, and verify that the configuration was updated.

Now, when you perform a synchronization, with the delete users option, only enabled Active Directory users will remain in the database.

Important: Enabling this option may cause selected accounts (i.e. disabled user accounts) to be deleted from the PaperCut database. This is a destructive operation, and hence we always recommend taking a Backup before performing the a synchronization.

Keywords: exclude sync synchronize disabled expired account AD domain

Categories: Domains