Synchronize AD Users
The Synchronize AD Users service task is responsible for the following:
- Removes user accounts from existing roles for users removed entirely from the AD or for users that do not exist in specified LDAP search paths.
- Synchronizes AD users with the database by caching the AD users for quicker user-related operations.
- Synchronizes auto groups when Auto-Roles is enabled on the Authentication and AD Settings page in Console Administrator Tool.
The Synchronize AD Users Service Task has the following options:
| Field | Description |
|---|---|
| Information | This text field is used to provide a description of the purpose of the Synchronize AD Users task being created and is only present to help users manage their tasks. |
| Remove missing users after X days | Missing (disabled) users are kept for the number of days specified and then removed from the Users list. A value of zero means missing users are removed the same day. The default value is 30. |
| Optionally specify a new owner for tags, reports, policies and service tasks owned by any users that will be removed | When a user account is deleted from the Console by the Synchronize AD Users service task, any tags, reports or service tasks that were owned by that user are also deleted. If you want to preserve those tags, reports and service tasks you may select a new owner to assign them to by clicking on the '...' and placing a check mark in the box next to the new owners name. Policies are not removed if a new owner is not specified. |
| Location | This option only displays if you have chosen to replicate your database prior to installation of the Console, but is disabled for this service task. |
| Maximum task run time |
Specify the amount of time that the service task has to complete. For example, if you set the Maximum task run time to 5 minutes, after 5 minutes has elapsed from the time the service task first executes, the service job stops and its status shows as Aborted. The default setting is indefinitely. The following options are available:
|
