When Marked Inactive

Question

I have struggled with this custom Adaxes property a little, because it is useful in deprovisioning.

When looking at User accounts, the property works via a scheduled task or custom command that updates the property. I can only view this in the web interface, and not in the GUI.

When looking at Computer accounts, the property seems settable, but never shows the value in any interface.

So, is this a bug? And, will it be possible to look at Adaxes properties in the GUI?

Answer 1

Hello,

The When Marked Inactive property is a special property that serves a very specific purpose, marking the date when a user or computer account was confirmed to be inactive. To avoid potential conflicts, it has certain limitations. One of the limitations is that you can set the When Marked Inactive property only for a disabled account. If you try to set the property for an enabled or expired account, it will not be set (without an error).

As for viewing the When Marked Inactive property in the Administration Console, we are currently not planning to make the property viewable in the Console. However, you can create a Custom Command that will output the value for the property in the Execution Log that will be shown to you once the Command completes. To create such a Custom Command:

1. Create a new Custom Command.

2. On the 2nd step of the Create Custom Command wizard, select:

   • User - to be able to check when user accounts were marked as inactive,
     
   • Computer - to be able to check when computer accounts were marked as inactive.
     

3. On the 3rd step, add the Run a program or PowerShell script action and paste the following script in the Script field:

    try
    {
        $whenMarkedInactive = $Context.TargetObject.Get("adm-WhenMarkedInactive")
    }
    catch
    {
        $whenMarkedInactive = "Not set"
    }
   
    $Context.LogMessage($whenMarkedInactive, "Information")