Inactive Users

Question

We have a scheduled task configured today that we run daily over our user pool and checks IF an account has been inactive for XX weeks, it disables it and triggers some of our off-boarding type tasks. Really works great, and we get a lot of use out of it.

One issue we run into with this though is this script will disable a user because they haven't logged into that account for some time, but we then receive word it needs to be enabled. We will go in and re-enable it, reset the password, let the user know that information. The problem is a lot of the time the users don't login by the end of business that day so this task that runs at again at 5 PM looking for inactive users will catch that account, and disable it once more.

Do you happen to know what attribute Adaxes is looking at to determine the account is inactive? I'm was thinking we could clear that out in these type of situations?

If you or anyone else has suggestions on how to get around this we are open to those as well.

Thanks,

Answer 1

Hello Ben,

Do you happen to know what attribute Adaxes is looking at to determine the account is inactive? I'm was thinking we could clear that out in these type of situations?

The condition uses the calculated adm-InactivityDuration property. The property is not physically stored in Active Directory and there is no possibility to update it manually.

If you or anyone else has suggestions on how to get around this we are open to those as well.

As a solution we suggest adding a condition that will check when the user account has been last updated. For example, if the account was updated less than 2 days ago, the task will not affect the user. It means that all the users re-enabled for the last two days will not be disabled by the task.To add the condition to your task:

1. Launch Adaxes Administration Console and navigate to the Scheduled Task.
2. Right-click the account is inactive condition and click Add New Condition in the context menu.
   
3. Select If <property><relation><value>.
4. Select If When Changed less or equal and click Edit.
   
5. Select minus 2 days.
   
6. Click OK twice and save the changes.

You should have something like the following:

Comments

Thanks for the help on this...I added this logic to the schedule task and I think we're good.