Please reference https://www.adaxes.com/questions/749/find-managed-object-on-deprovision
Looking for a script that will show if the person being deprovisioned is an 'Approver' for any objects, and will generate an email to notify that the objects need a new approver. The above question is similar but is quite old and I don't believe works anymore.
Hello,
The question you referenced is only about checking whether the target user is a manager or owner of any other account. It has nothing to do with approval requests. If that is exactly what you want, the script from the question works just fine.
Thanks for confirming, I am looking for a script that will check if the user being deprovisioned is set as an 'Approver' and generate a notification email.
What exactly do you mean by Approver in this case?
In this case I'm talking about a user that has been assigned as an approver for an action. For example, adding a user to a group via the "Add the user to a group" action.
Thank you for clarifying. Unfortunately, there is no such possibility. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.
Thank you for your assistance. Would this be possible another way?
Sorry for the confusion, but we meant that there is generally no possibility to check whether a user is approver.
Using the built in 'Deprovision' Custom Command, I would like the person that is trying to Deprovision a user (Help Desk member) be asked who (from a list of existing active ... to leave the question 'blank', which means that no one gets access to the mailbox.
When we deprovision a user the member of groups are deleted and the power shell scrips only runs as removing all memberships. I can't see what was removed. Is there a scrips I can run prior to removing those memberships that will e-mail what they are?
Here is what i have been trying with Set-ADUser -Identity $user -Clear "extensionAttribute5" Set-ADUser -Identity $user -Add @{extensionAttribute5 = "NoLicenseNeeded"}
I would like to change department without a script just yet if possible on multiple accounts. If I cant do this then I will entertain custom script Thanks :)
When setting user accounts to disable we use a business rule which executes whenever a user account is modified. So for example a member from our Service Desk team will go onto ... behind for some reason, and doesn't reflect the server date/time it lives on.