Ignoring disabled Active Directory users

KB Home   |   Ignoring disabled Active Directory users

Main.IgnoringDisabledActiveDirectoryUsers History

Hide minor edits - Show changes to output

Changed lines 3-4 from:
'''Note:''' As of version 14.0, disabled users will not be imported in PaperCut by default. If you want to import disabled users navigate to '''Options''' -> '''User/Group Sync''' and check [@Import disabled users@].  When you are ready to make the change permanent, select [@Synchronize Now@].
to:
'''Note:''' As of version 14.0, disabled users will not be imported in PaperCut by default. If you want to import disabled users navigate to '''Options''' -> '''User/Group Sync''' and check [@Import disabled users@].  When you are ready to make the change permanent, select [@Synchronize Now@]. This will import the disabled users in PaperCut.
Changed lines 3-19 from:
'''Note:'''  As of version 8.3, it is now possible to ignore disabled users by un-checking a check box in the Admin Console.  Navigate to '''Options''' -> '''User/Group Sync''' and un-check [@Import disabled users@].  To remove disabled users from PaperCut, select [@Delete users that do not exist in the selected source...@] then select [@Test Settings@] and review the results of the test sync.  When you are ready to make the change permanent, select [@Synchronize Now@].

The remainder of this article is relevant to releases prior to version 8
.3.

When PaperCut NG / ChargeBack imports users from Active Directory it will import both enabled and disabled Active Directory users.  This is the default behavior because many organizations still wish to ensure disabled users exist in the PaperCut database as the users may  only be disabled temporarily (e.g. for disciplinary reasons). 

On the other hand, other organizations may disable accounts once users leave the organization.  In this case, the designed behavior might be to have these users automatically deleted from the PaperCut database.  PaperCut NG can be configured to only import/sync enabled users.  To do this:

# Perform a backup
# Navigate to the '''Options''' tab.
# Press the '''Config Editor (Advanced)''' action on the left.
# Find the @@user-source.config-arg@@ property.
# Change the value to @@enabled-users-only@@.
# Press the '''Update''' button next the the config property, and verify that the configuration was updated.

Now, when you perform a synchronization, with the ''delete users'' option, only enabled Active Directory users will remain in the database.

to:
'''Note:''' As of version 14.0, disabled users will not be imported in PaperCut by default. If you want to import disabled users navigate to '''Options''' -> '''User/Group Sync''' and check [@Import disabled users@].  When you are ready to make the change permanent, select [@Synchronize Now@].

To ignore disabled users un-check a check box in the Admin Console.  Navigate to '''Options''' -> '''User/Group Sync''' and un-check [@Import disabled users@].  To remove disabled users from PaperCut, select [@Delete users that do not exist in the selected source
...@] then select [@Test Settings@] and review the results of the test sync.  When you are ready to make the change permanent, select [@Synchronize Now@].


Changed lines 23-24 from:
[-Keywords: exclude sync synchronize disabled expired account AD domain -]
to:
[-Keywords: exclude sync synchronize disabled expired account AD domain, License Exceeded -]
December 09, 2010, at 05:19 PM by Rick - added steps required to delete disabled users from PC
Changed lines 3-8 from:
'''Note:'''  As of version 8.3, it is now possible to ignore disabled users by checking a simple checkbox in the [@Options@] -> [@User/Group Sync@] page.  The following article is relevant to releases prior to version 8.3.

When PaperCut NG / ChargeBack imports
users from Active Directory it will import both enabled and disabled Active Directory users.  This is the default behaviour because many organizations still wish to ensure disabled users exist in the PaperCut database as the users may  only be disabled temporarily (e.g. for disciplinary reasons). 

On the other hand, other organizations may disable accounts once
users leave the organization.  In this case, the designed behaviour might be to have these users automatically deleted from the PaperCut database.  PaperCut NG can be configured to only import/sync enabled users.  To do this:
to:
'''Note:'''  As of version 8.3, it is now possible to ignore disabled users by un-checking a check box in the Admin Console.  Navigate to '''Options''' -> '''User/Group Sync''' and un-check [@Import disabled users@].  To remove disabled users from PaperCut, select [@Delete users that do not exist in the selected source...@] then select [@Test Settings@] and review the results of the test sync.  When you are ready to make the change permanent, select [@Synchronize Now@].

The remainder of this article is relevant to releases prior to version 8.3.

When PaperCut NG / ChargeBack imports
users from Active Directory it will import both enabled and disabled Active Directory users.  This is the default behavior because many organizations still wish to ensure disabled users exist in the PaperCut database as the users may  only be disabled temporarily (e.g. for disciplinary reasons). 

On the other hand, other organizations may disable accounts once users leave the organization.  In this case, the designed behavior
might be to have these users automatically deleted from the PaperCut database.  PaperCut NG can be configured to only import/sync enabled users.  To do this:
Changed lines 7-8 from:
On the other hand, other organizations may disable accounts once user's leave the organization.  In this case, the designed behaviour might be to have this users automatically deleted from the PaperCut database.  PaperCut NG can be configured to only import/sync enabled users.  To do this:
to:
On the other hand, other organizations may disable accounts once users leave the organization.  In this case, the designed behaviour might be to have these users automatically deleted from the PaperCut database.  PaperCut NG can be configured to only import/sync enabled users.  To do this:
Changed lines 3-4 from:

to:
'''Note:'''  As of version 8.3, it is now possible to ignore disabled users by checking a simple checkbox in the [@Options@] -> [@User/Group Sync@] page.  The following article is relevant to releases prior to version 8.3.
Changed lines 16-17 from:
Now, when you perform a synchronization, only enabled Active Directory users are imported.
to:
Now, when you perform a synchronization, with the ''delete users'' option, only enabled Active Directory users will remain in the database.
April 08, 2008, at 04:44 AM by 218.214.136.161 -
Changed lines 3-4 from:
'''NOTE: This article applies to PaperCut NG and ChargeBack'''
to:

April 08, 2008, at 04:37 AM by 218.214.136.161 -
Changed lines 5-6 from:
When PaperCut NG/ChargeBack imports users from Active Directory it will import both enabled and disabled Active Directory users.  This is the default behaviour because many organizations still wish to ensure disabled users exist in the PaperCut database as the users may  only be disabled temporarily (e.g. for disciplinary reasons). 
to:
When PaperCut NG / ChargeBack imports users from Active Directory it will import both enabled and disabled Active Directory users.  This is the default behaviour because many organizations still wish to ensure disabled users exist in the PaperCut database as the users may  only be disabled temporarily (e.g. for disciplinary reasons). 
April 08, 2008, at 04:36 AM by 218.214.136.161 -
Changed lines 3-6 from:
'''NOTE: This article applies to PaperCut NG only'''

When PaperCut NG imports users from Active Directory it will import both enabled and disabled Active Directory users.  This is the default behaviour because many organizations still wish to ensure disabled users exist in the PaperCut database as the users may  only be disabled temporarily (e.g. for disciplinary reasons). 
to:
'''NOTE: This article applies to PaperCut NG and ChargeBack'''

When PaperCut NG/ChargeBack imports users from Active Directory it will import both enabled and disabled Active Directory users.  This is the default behaviour because many organizations still wish to ensure disabled users exist in the PaperCut database as the users may  only be disabled temporarily (e.g. for disciplinary reasons). 
Changed lines 7-8 from:
Some organizations only disable accounts once user's leave the organization, so they do not want these users imported into PaperCut.  PaperCut NG can be configured to only import enabled users.  To do this:
to:
On the other hand, other organizations may disable accounts once user's leave the organization.  In this case, the designed behaviour might be to have this users automatically deleted from the PaperCut database.  PaperCut NG can be configured to only import/sync enabled users.  To do this:
Changed lines 5-6 from:
When PaperCut NG imports users from Active Directory it will import both enabled and disabled Active Directory users.  This is the default behaviour because many organizations still want to import disabled users because they might only be disabled temporarily (e.g. for disciplinary reasons). 
to:
When PaperCut NG imports users from Active Directory it will import both enabled and disabled Active Directory users.  This is the default behaviour because many organizations still wish to ensure disabled users exist in the PaperCut database as the users may only be disabled temporarily (e.g. for disciplinary reasons). 
Added line 9:
# Perform a backup
Changed lines 17-19 from:
to:
'''Important:''' Enabling this option may cause selected accounts (i.e. disabled user accounts) to be deleted from the PaperCut database.  This is a destructive operation, and hence we always recommend taking a '''Backup''' before performing the a synchronization.

Added lines 1-2:
(:title Ignoring disabled Active Directory users:)
Changed lines 18-20 from:
[-Keywords: exclude sync synchronize disabled expired account AD domain -]
to:
[-Keywords: exclude sync synchronize disabled expired account AD domain -]

''Categories:'' [[!Domains]
]
Changed lines 1-16 from:
Describe IgnoringDisabledActiveDirectoryUsers here.
to:
'''NOTE: This article applies to PaperCut NG only'''

When PaperCut NG imports users from Active Directory it will import both enabled and disabled Active Directory users
.  This is the default behaviour because many organizations still want to import disabled users because they might only be disabled temporarily (e.g. for disciplinary reasons). 

Some organizations only disable accounts once user's leave the organization, so they do not want these users imported into PaperCut.  PaperCut NG can be configured to only import enabled users.  To do this:

# Navigate to the '''Options''' tab.
# Press the '''Config Editor (Advanced)''' action on the left.
# Find the @@user-source.config-arg@@ property.
# Change the value to @@enabled-users-only@@.
# Press the '''Update''' button next the the config property, and verify that the configuration was updated.

Now, when you perform a synchronization, only enabled Active Directory users are imported.


[-Keywords: exclude sync synchronize disabled expired account AD domain -]

Comments

Share your findings and experience with other PaperCut users. Feel free to add comments and suggestions about this Knowledge Base article. Please don't use this for support requests.

Article last modified on January 07, 2014, at 03:18 AM
Printable View   |   Article History   |   Edit Article