Offboarding across multiple forests.

Question

Hi,

Within our infrastrcuture we have several forests with multiple domains. Some of our user account setups mean that an individual might have accounts located across different forests.

What's the best way to search for all associated user accounts across all of the managed domains and offboard/archive them as a single task?

Answer 1

Hello,

It totally depends on the way the accounts can be identified as related ones. As a general recommendation, you can create a custom command that will execute the deprovisioning command for the target user and also execute a script. The script will find related accounts for the user in other managed domains and execute the deprovisioning command for them. The following example from our repository should be helpful: https://www.adaxes.com/script-repository/execute-custom-command-on-user-with-username-identical-to-the-target-user-s250.htm.

Comments

Hi,

Thanks for this.

I assume this can be adjusted to use email address rather than the samaccount name?

This would help counter some differences in naming conventions..

---

Hello,

Yes, sure, you will just need to adjust the script accordingly.