Feature request - Account expire constraint

Question

Dear support,

I would like to make sure that the account expiration date for an account is between today & 3 months from now.

In the property pattern I am able to define a default value, but for the constraint I can only input a list of valid date.

In my opinion it would make more sense to have range instead of discrete values.

I know how I could implement that check through the script - you don't need to provide that to me, it is just a feature request :-)

Thanks

Answer 1

Hello Pierre,

Yes, you are right, currently you can achieve this only with the help of a Business Rule. Feature request accepted. We've added it to our sandbox and will discuss it when deciding on features for future releases.

Comments

Dear support,

Since we are at it, I would have another date related feature request:

It would be great if we could specify the output format of the template %datetime%.

It is currently resolved to plain text date like "22/01/2016 14:45:45". In that shape it is sadly unsable to filter against msDS-LastSuccessfulInteractiveLogonTime, lastlogontimestamp, ... that would be very convenient in Business rule for instance.

Regards,

---

Hello Pierre,

Actually, you can use Business Rule conditions to compare such properties:

Is that something what you needed? If not, could you provide more details?

---

Dear support,

I want to use that feature in business rules and it does not work:

The %datetime% template get resolved to a plain string instead of a timestamp and it fails.

Regards

---

Hello Pierre,

Currently, you won't be able to build a Business Unit like that because the %datetime% value reference is resolved into a text representation of a date, and in order to compare it with lastLogonTimestamp you need an integer. As a workaround, we suggest using the Inactive Users Report available in the Web Interface. It returns you a list of users who haven't logged on during a certain number of days.

As soon as the report is generated, you will be able to perform the operations on the users, for example, deprovision them.

If you want to perform certain action automatically in Business Rules, Custom Commands or Scheduled Tasks, you can use the If account is inactive <period> condition type to determine which accounts have not logged on for a while.