Not able to disable computer when user is disabled

Question

Hello,

I'm using this script as part of a deprovisioning process https://www.adaxes.com/script-repository/disable-all-computers-managed-by-a-user-s29.htm

I'm using it in a Business Rule After disabling a user account.

The script executes with no errors, but the computer managed by the user remains enabled.

Comments

Hello,

As per our check, the script works exactly as intended. Could you, please, specify whether you have Adaxes service installed in the very same domain that is managed by the service and where the computers and the user are located?

---

I have the Adaxes service installed on the same domain as the user and computer.

The User is in a 'Users' OU and the computer is in 'All Computers' OU, like so:

• CORP.net
  • Users
    • User1
  • All Computers
    • Computer1

Computer1 is managed by User1, however when User1 is disabled Computer1 remains enabled.

It's my understanding that the script should disable Computer1?

---

Hello,

Yes, your understanding is correct. Can you see both the user and the computer in Adaxes Administration Console? Did you make sure that the Business Rule executing the script is effective for the user? For details on how to check that, have a look at the following help article: https://www.adaxes.com/help/?ManageBusinessRules.ViewBusinessRulesEffectiveForADObjects.html. Additionally, for troubleshooting purposes, please, do the following:

1. Launch Adaxes Administration Console.
2. In the Console Tree, expand your service node.
3. Right-click Active Directory and then click Find.
4. Activate the LDAP Search tab.
5. In the LDAP filter field, enter the following: managedBy=<userDN>, where <userDN> is the distinguished name (DN) of the user for which the script was executed. For information on how to get the DN, see https://adaxes.com/sdk/HowDoI.GetDnOfObject.
6. Click Search.
7. Is the computer that should be disabled displayed in search results?

---

Hello,

I have confirmed the business rule is effective for the user. I have the script as an action set on a larger business rule.

All other actions for the business rule work except for the computer disable script.

I have done an LDAP search and confirmed the computer is showing up as a managed object for the user.

Thanks Ben

---

Hello,

Thank you for the provided details. For further troubleshooting, please, do the following:

• Post here or send us (support[at]adaxes.com) a screenshot of the Business Rule that executes the script.
• Re-disable the user and post here or send us (support[at]adaxes.com) a full screenshot of the Execution log that will be displayed.