Deleting users with Delegated Admin

Hope anyone can help with this:
When I delete a user with Delegated Admin (For Messaging 5.x) the user
seems to be deleted in iDA, but it is not deleted in LDAP.
Therefore, I cannot re-use it's attributes (like E-mail address) for
another (new) user.
This causes all kind of problems.
I can go into the Console and through away the user, then everything
works again. But I expected iDA also to delete the user if I use the
delete button.
Any ideas? Did I forget something?
Thanks in advance,
Niels de Troye

Hi..
the nda does not remove the user... is put it in suspend mode...
you have to run the imsimta purge command to remove the user.. or to wait
the server to do that
in a day or so....
take a look at the manual to see how you can do that...
"N. de Troye" wrote:
Hope anyone can help with this:
When I delete a user with Delegated Admin (For Messaging 5.x) the user
seems to be deleted in iDA, but it is not deleted in LDAP.
Therefore, I cannot re-use it's attributes (like E-mail address) for
another (new) user.
This causes all kind of problems.
I can go into the Console and through away the user, then everything
works again. But I expected iDA also to delete the user if I use the
delete button.
Any ideas? Did I forget something?
Thanks in advance,
Niels de Troye--
Over and Out
Giorgos Kiriakidis
Technical Department
NetSmart S.A.
Panepistimiou 58.
Athens 10678
Hellas
Tel +3013302608
Fax +3013302658
Email [email protected]
This message contains confidential information intended for a specific
individual and purpose,
is protective by law. If you are not the intended recipient, you should
delete this message.
Any disclosure, coping, distribution or taking any action based on this
message is strictly prohibited.

Similar Messages

Problem deleting users with delegated admin

Hello,
I seem to be having a problem deleting users with delegated administrator. I am using JES 2005Q4.
Here is what I do:
I set Inetuserstatus and mailuserstatus to deleted. Then run msuserpurge to delete the mail box. This seems to be working fine. Then I do a commadmin domain purge and it will actually delete the persons ldap record, but it does not delete the o=pab records or the o=PIserverDB records.
I am probably missing a step here, and would apprecidate it somebody could point me in the right direction.
Thanks,
Gary

DA patches:
119777-10 most current release for Solaris
119778 for X86
119779 for Linux
118540-23 Communication Express Solaris Sparc
118541 X86
118542 Linux
118207-42 Messaging core Solaris sparc
118208 X86
118209 Linux
116574-02 Veritas Vcsha (sparc only)
118242-03 and 118245-03 Dssetup sparc
118243 and 118246 X86
118247 Linux
122018-02 Outlook Connector
(all the currently released patches. Most have t-patches available from tech support post the above numbers)

Macbook crash when trying to autorize user with system admin account in maverick

macbook crash when trying to autorize user with system admin account in maverick,
Please help

Hi Frank,
Please refer to following operations and check if can help you.
1.
wmic /node:"HOSTNAME" /user:"ADMIN_USER" /password:"PASSWORD" logicaldisk
Please replace HOSTNAME with IP address, then monitor the result.
2. Please open Control Panel, select User Accounts and click Manage another account. Then select the user account which you will use in WMIC command. Then please select Change
the account type and check if you have set it as Administrator. If no, please set it as Administrator and check if this issue still persists.
3. Please refer to the following thread and check if can help you.
WMI
Remote "Access Denied"
If this issue still persists, please let me know the edition information of Windows OS that this issue occurred
in. Meanwhile, you described “The user account is a member of Administrators.” Would you please let me summarily know how operate?
Hope this helps.
Best regards,
Justin Gu

Can't create user with Delegated Administrator Console! Thank you!

I have installed JES2005Q4 (include Deirectory Server、Access Manager、Web Server、Messaging Server、Calendar Server、Instant Messaging、Communications Express and Delegated Administrator) ,
i can create domain and user with "commadmin" command, but can't create user with Delegated Administrator console.
When i checked the logs of the Web Server, found some errors:
[04/Feb/2006:11:55:25] failure (12015): for host 192.168.182.130 trying to POST /da/wizard/WizardWindow, service-j2ee reports: ApplicationDispatcher[da] WEB2649: Servlet.service() for servlet jsp threw exception
javax.servlet.ServletException
     at org.apache.jasper.runtime.PageContextImpl.handlePageException(PageContextImpl.java:536)
     at jsps.com_sun_web_ui._jsp._wizard._WizardWindow_jsp._jspService(_WizardWindow_jsp.java:559)
     at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:107)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
     at com.iplanet.ias.web.jsp.JspServlet$JspServletWrapper.service(JspServlet.java:687)
     at com.iplanet.ias.web.jsp.JspServlet.serviceJspFile(JspServlet.java:459)
     at com.iplanet.ias.web.jsp.JspServlet.service(JspServlet.java:375)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
     at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:772)
     at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:471)
     at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:382)
     at com.iplanet.jato.view.ViewBeanBase.forward(ViewBeanBase.java:340)
     at com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:261)
     at com.sun.web.ui.view.wizard.CCWizard.handleNextButtonRequest(CCWizard.java:730)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:585)
     at com.iplanet.jato.view.command.DefaultRequestHandlingCommand.execute(DefaultRequestHandlingCommand.java:183)
     at com.iplanet.jato.view.RequestHandlingViewBase.handleRequest(RequestHandlingViewBase.java:308)
     at com.iplanet.jato.view.ViewBeanBase.dispatchInvocation(ViewBeanBase.java:802)
     at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:740)
     at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:760)
     at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandler(ViewBeanBase.java:571)
     at com.iplanet.jato.ApplicationServletBase.dispatchRequest(ApplicationServletBase.java:957)
     at com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:615)
     at com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:473)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:807)
     at com.sun.comm.da.WizardWinServlet.service(WizardWinServlet.java:111)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:247)
     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
     at com.sun.comm.da.LoginFilter.doFilter(LoginFilter.java:128)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:213)
     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:280)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:209)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:161)
     at com.iplanet.ias.web.WebContainer.service(WebContainer.java:580)
----- Root Cause -----
javax.servlet.jsp.JspException
     at com.sun.web.ui.taglib.wizard.CCWizardTag.getWizardPageHTML(CCWizardTag.java:1577)
     at com.sun.web.ui.taglib.wizard.CCWizardTag.appendPageletBodyContentHTML(CCWizardTag.java:668)
     at com.sun.web.ui.taglib.wizard.CCWizardTag.appendWizardBodyHTML(CCW
[04/Feb/2006:11:55:25] failure (12015): for host 192.168.182.130 trying to POST /da/wizard/WizardWindow, service-j2ee reports: WEB2798: [da] ServletContext.log(): [ERROR] Uncaught application exception
com.iplanet.jato.NavigationException: Exception encountered during forward
Root cause = [javax.servlet.jsp.JspException]
     at com.iplanet.jato.view.ViewBeanBase.forward(ViewBeanBase.java:380)
     at com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:261)
     at com.sun.web.ui.view.wizard.CCWizard.handleNextButtonRequest(CCWizard.java:730)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:585)
     at com.iplanet.jato.view.command.DefaultRequestHandlingCommand.execute(DefaultRequestHandlingCommand.java:183)
     at com.iplanet.jato.view.RequestHandlingViewBase.handleRequest(RequestHandlingViewBase.java:308)
     at com.iplanet.jato.view.ViewBeanBase.dispatchInvocation(ViewBeanBase.java:802)
     at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:740)
     at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:760)
     at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandler(ViewBeanBase.java:571)
     at com.iplanet.jato.ApplicationServletBase.dispatchRequest(ApplicationServletBase.java:957)
     at com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:615)
     at com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:473)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:807)
     at com.sun.comm.da.WizardWinServlet.service(WizardWinServlet.java:111)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:247)
     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
     at com.sun.comm.da.LoginFilter.doFilter(LoginFilter.java:128)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:213)
     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:280)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:209)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:161)
     at com.iplanet.ias.web.WebContainer.service(WebContainer.java:580)
Root cause:
javax.servlet.jsp.JspException
     at com.sun.web.ui.taglib.wizard.CCWizardTag.getWizardPageHTML(CCWizardTag.java:1577)
     at com.sun.web.ui.taglib.wizard.CCWizardTag.appendPageletBodyContentHTML(CCWizardTag.java:668)
     at com.sun.web.ui.taglib.wizard.CCWizardTag.appendWizardBodyHTML(CCWizardTag.java:658)
     at com.sun.web.ui.taglib.wizard.CCWizardTag.getHTMLStringInternal(CCWizardTag.java:469)
     at com.sun.web.ui.taglib.common.CCTagBase.doEndTag(CCTagBase.java:114)
     at jsps.com_sun_web_ui._jsp._wizard._WizardWindow_jsp._jspService(_WizardWindow_jsp.java:260)
     at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:107)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
     at com.iplanet.ias.web.jsp.JspServlet$JspServletWrapper.service(JspServlet.java:687)
     at com.iplanet.ias.web.jsp.JspServlet.serviceJspFile(JspServlet.java:459)
     at com.iplanet.ias.web.jsp.JspServlet.service(JspServlet.java:375)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
     at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:772)
     at org.apache.catalina.co
[04/Feb/2006:11:55:26] failure (12015): for host 192.168.182.130 trying to POST /da/wizard/WizardWindow, service-j2ee reports: StandardWrapperValve[WizardWinServlet]: WEB2792: Servlet.service() for servlet WizardWinServlet threw exception
javax.servlet.ServletException: Uncaught exception
     at com.iplanet.jato.ApplicationServletBase.onUncaughtException(ApplicationServletBase.java:1415)
     at com.sun.comm.da.WizardWinServlet.onUncaughtException(WizardWinServlet.java:98)
     at com.iplanet.jato.ApplicationServletBase.fireUncaughtException(ApplicationServletBase.java:1164)
     at com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:639)
     at com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:473)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:807)
     at com.sun.comm.da.WizardWinServlet.service(WizardWinServlet.java:111)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:247)
     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
     at com.sun.comm.da.LoginFilter.doFilter(LoginFilter.java:128)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:213)
     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:280)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:209)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:161)
     at com.iplanet.ias.web.WebContainer.service(WebContainer.java:580)
----- Root Cause -----
com.iplanet.jato.NavigationException: Exception encountered during forward
Root cause = [javax.servlet.jsp.JspException]
     at com.iplanet.jato.view.ViewBeanBase.forward(ViewBeanBase.java:380)
     at com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:261)
     at com.sun.web.ui.view.wizard.CCWizard.handleNextButtonRequest(CCWizard.java:730)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:585)
     at com.iplanet.jato.view.command.DefaultRequestHandlingCommand.execute(DefaultRequestHandlingCommand.java:183)
     at com.iplanet.jato.view.RequestHandlingViewBase.handleRequest(RequestHandlingViewBase.java:308)
     at com.iplanet.jato.view.ViewBeanBase.dispatchInvocation(ViewBeanBase.java:802)
     at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:740)
     at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:760)
     at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandler(ViewBeanBase.java:571)
     at com.iplanet.jato.ApplicationServletBase.dispatchRequest(ApplicationServletBase.java:957)
     at com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:615)
     at com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:473)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:807)
     at com.sun.comm.da.WizardWinServlet.service(WizardWinServlet.java:111)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:247)
     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
     at com.sun.comm.da.LoginFilter.doFilter(LoginFilter.java:128)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain

Now i want to update the Delegated Administrator with the 119778-09.jar patch, but the error show:
Unable to open keystore </var/sadm/security/patchadd/trustore> for reading.
Signature invalid on signed patch <119778-09>.

Delete user with db owner roles

Dear All,
I want delete user with db owner roles from all database and from server using sql query.
So i want using one query to delete user from all database and also from server
how i can do that?
best regards,
Surbakti

I means it's login.
I want delete because user whom use that login already resign from my company.
so if i delete that login i can use that slot for the other user.
best regards,
Surbakti
First you said you want to delete all logins with db owner roles and now you are saying I want to delete use login who has left the company. Was there mass exodus.
If login was a domain login you should also make sure it gets removed from domain, then from local windows machine and then from SQL server. If it is SQL Server login it can be removed straight. Search online you would find various methods to remove
login
Have alook at below links
Question about removing logins from database
Drop login
Also note that any job which the login owned would be affected if login is removed. So you need to be careful
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from it
My Technet Wiki Article
MVP

MPR for helpdesk to create / delete users with authZ

Hi everybody,
I'm facing a strange situation with two MPRs. I'm setting up 6 policies for the IT helpdesk to manage users with and without authZ workflows in place, and so far I managed the grant really granular rights depending on the target and modified attributes.
Today I wanted to create my last 2 simple policies for the create resource and delete resource operations, having:
- Policy disabled unchecked
- IT Helpdesk as requestor
- Grants permission unchecked
- Create / delete resource checked
- All Active People for create / All Non-Administrators for delete as target resources, All attributes selected.
- The 2 authZ workflows checked; they are the same as for 2 other policies
When a helpdesk user is creating/deleting a user trough the portal it gets an Access Denied error on submit, when I search the request as admin I see the create/ delete policies are the only ones applied. When I check the Grants permission the user is created/deleted
without authZ, but this is not what I want.
Does anyone has an clue why the workflows are not triggered in these 2 cases, and why are they fired in the other two?
Thanks for helping me out.
Cristian

Even though this post is old I think it worthwhile to answer for others. Hopefully, Christian has already found his solution.
A key to troubleshooting these issues is to go to "Search Requests" and look at the request and see what MPR's were applied. Then look to see if the workflows started requests.
Request Processing
http://msdn.microsoft.com/en-us/library/windows/desktop/ee652475(v=vs.100).aspx
David Lundell, Get your copy of FIM Best Practices Volume 1 http://blog.ilmbestpractices.com/2010/08/book-is-here-fim-best-practices-volume.html

Network User with Local Admin Privileges?

I have a small network (around 25 clients total) that was setup prior to my arrival. Each client has its own unique local admin (each machine was setup by the individual user) and it's become somewhat daunting to support them.
All of the machines are connected (but not specifically bound) to an Open Directory and each is accessible via Remote Desktop, however I cannot push software updates, etc. without local admin privileges.
I'd rather not create an account on each machine, nor do I want to completely lock down each computer (I'd like them to still have the flexibility to be admins so they can install apps, etc.)
Is it possible to authenticate against OD and obtain local admin privileges?

Yes.
You can wipe all account information and then recreate a common initial admin account. This will make administration far easier as all machines will have the same admin username/password combination. Next, bind all of the systems to the domain and create domain accounts for all users on the server (likely already exist). Log in as the domain accounts and migrate permissions to domain ids. Finally, promote the user to the local admin group through System Preferences > Accounts on the workstation. You must enable the account as a mobile account in Workgroup Manager first. If you do not, the account will not cache to the workstation and you will be unable to add it to the admin group.
Also, in a workgroup of 25, I would recommend rethinking the decision to grant local admin access to end users. This is asking for trouble as you will have no control over when updates are applied or even if they are. In theory (and probably in practice), you will have 25 completely different machines configurations. This is far harder to manage and troubleshoot than 25 systems with different admin accounts.
If you must provide some level of autonomy, while not trivial, you might want to consider modifying /etc/authorization and granting limited admin rights to the users.
Hope this helps - congrats on the opportunity

Deployment Software on user with no admin rights

Hello,
We are using SCCM 2012 R2 and our environment machines are Windows 8.1 with no admin rights for all users.
We are trying to deploy some sprecific software but with no luck.
On the Deployment method we specify "Install for User" and what happens on User side is "Past due it will be retried".
If I modify my script and instead of /qn I use /qb I have the UAC control that pops up.
But from my understanding SCCM should install the software as system account.
How can we do to make it work?
Thank You,
Chris

Hello,
I have already bypass my problem using the "install for system".
Creating 2 deployment method. One for the application (msi) "Install for system" and the second for the settings (cmd) "Install for User" and it works like a charm.
But there is no way for SSCM to elevate the privileges when installing an application with "Install for user" set?
Chris

Problem allocating service packages to users via delegated admin

I've created a custom service package using the sample templates. Upon assigning this newly created package to a user via Delegated Administrator I receive the following message "cannot create user - all service packages of this type have been allocated". Problem is I've made about 200 available and the stats for this package show 0 used. Please advice.
Cheers

Please post this question at Developer Forums > E-Mail, Calendar, & Collaboration

How to reconcile deleted users with GTC

Hi all,
I'm wandering wich is the best approach to perform reconciliation of deleted users using GTC connector. (It doesn't concile it by default, does it?).
I don't know if it's a bad idea to mark the deletion in the target table row (setting a value in a column) and revoke the user through an Entity Adapter. Should it be better to develop a custom Scheduled Task for this?
Any tip will be considered!
Thanks in advance,

Hi,
Yes I run both Schedule task as "time-programmed" . I usually run creation task first and then it is followed by delete recon task.
I am not fully understanding what do you mean by starting GTC generated task automatically? Please give me more insight before I comment on this.
For delete recon you need to do following
HashMap userValues[];
userValues = null;
userValues=createDeleteHashMap(results);
Set deletedAcc = reconUtil.provideDeletionDetectionData(resourceObject, userValues);
missingUser = reconUtil.getMissingAccounts(resourceObject, deletedAcc);
long reconEvent[] = reconUtil.deleteDetectedAccounts(missingUser);
Here userValues is array of Hashmap which have all the non revoked user.
So your steps should be.
1.Query the table wich store all active users and store them in an array of hashmap
2.Pass it to provideDeletionDetectionData method.
3.pass step 2 result set to getMissingAccounts method.
4.Pass step 3 result set to deleteDetectedAccounts.
Alternatively you do following.If in your query you can find out which user is deleted and if you are oim9.1 then follow these steps.
1.Query the table and get revoked/deleted user and store then in a hashmap.
2.Use createDeleteReconciliationEvent(java.lang.String psObjName, java.util.Map poAttributeList) to create the delete reconciliation event.
First approach is bit risky because if somehow in your table or view all the record are delete or revoked or by any error GTC connector did not find any record then it will revoked all the user from OIM which can lead to disaster as you are doing trusted recon.
Please let me know if you have any more questions.
Regards
Nitesh

How do I recover lost files from a deleted user with no backup?

So I was locked out of my account for no reason giving me an error occurred message. I came on here to get help and the guy who helped me made me delete the account and then make a new one with the same name. The next steps to recover the files that he gave me do not work and he mentions that if it doesn't work to find the files and if I do not have a back up I will never be able to recover those files. If I knew deleting the user would have a chance on loosing all my files I would have never done it! I CAN NOT LOOSE ALL MY FILE. I REALLY NEED ALL MY PHOTOS 10 years of photos. Some of the photos were in an older iphoto which was deleted after Yosemite update. WHY I DON'T KNOW. However most of my photos were in files never connected to iphoto. Can anyone please help me find and recover all my photos. PLEASE, there has to be a way. I appreciate all the help provided.

General File Recovery
If you stop using the drive it's possible to recover deleted files that have not been overwritten by using recovery software such as MAC Data Recovery, Data Rescue II, File Salvage or TechTool Pro. Each of the preceding come on bootable CDs to enable usage without risk of writing more data to the hard drive. Two free alternatives are Disk Drill and TestDisk. Look for them and demos at MacUpdate or CNET Downloads. Recovery software usually provide trial versions that enable you to determine if the software would help before actually paying for it. Beyond this or if the drive has completely failed, then you would need to send the drive to a recovery service which is very expensive.
The longer the hard drive remains in use and data are written to it, the greater the risk your deleted files will be overwritten.
Also visit The XLab FAQs and read the FAQ on Data Recovery.

Accessing network drive (kind:sharepoint) as user with no admin priviliges

I have a (linux) server which stores - and backs - up quite a bit of data for several users on my mac (Leopard).
I have set up AppleTalk on the server and password protected access. This works excellent. But for some reason I have to enable admin rights for all users to my computer - otherwise it is not possible to access the server data. I can see all the shared folders - but it simply does not allow me to access the data. It seems that my mac does not allow me to "mount" the drive...
On the log I get.
"NetworkNode:handleMountCallBack returned -6602"
It is a bit uncomfortable to have all users of my mac as "admin". Do you know how to fix this problem?
With kind regards,
Björn
Message was edited by: Bjorn_is

Hiya,
Your absolutely right in the last part. Recreating the user, gives them a new SID and you have the add that SID to SharePoint.
I would use a Powershell script to find all the places the user has permissions and replace with the new user SID.

User with no admin rights can not authenticate on wikis or blogs

I just set up my OD and proceeded to add users in the workgroup manager. I create an account for myself and gave it full admin rights under the privileges tab (in work group manager). I then created a test user account and gave it no privileges. My admin account can log on to wiki's and create blogs but my test account can not, It wont let me log in to any of the wiki's it's assigned to or set up a blog. I set the test account to have full privileges and then I was able to do these things.
I had this set up correctly before the 10.5.2 update came out and crashed my server, I had to re-install the OS and start from scratch again.
Any thoughts on what's wrong?
Thank You,
Message was edited by: pixelmnky

Are the users and groups local or in an OD master?

Using credentials of a logged in user with JMX (Admin console extension)

Hello,
I would appreciate any info regarding creation of a connection to the DomainRuntimeService MBean server in an administration console extension in BEA Weblogic 9.2.
The problem is that if I provide no security credentials, I'm not able to invoke any operations on the MBean server. Also the possibility of providing "default" user credentials within the extension "configuration" used to authenticate is not an option.
The most convenient way would be to use the same mechanisms used by the rest of the administration console, but there seems to be very little information around about where to retrieve the username/password used to log in to the console.
Thank you very much in advance, If you didn't understand my question, please ask for more information since English is not my native tongue.

Hi,
Check the following wiki content submitted by Michael Nicholls:
https://www.sdn.sap.com/irj/scn/wiki?path=/display/snippets/excel%252bspreadsheet%252bof%252bume%252bassignment%252bdata
The code for getting groups for your case (current logged in user) should be like:-
IWDClientUser clientUser = WDClientUser.getLoggedInClientUser();
IUser user1 = clientUser.getSAPUser();
Iterator groups = user1.getParentGroups(false);
while (groups.hasNext()) {
IGroup group = groupFact.getGroup(groups.next().toString());
String groupname = group.getDisplayName();
Add this group name to a list
I do not have NWDS access at the moment so haven't checked it myself... you may try it out.
Also check out the following threads on the same issue:
Re: Get all Groups for current user
Re: Portal User and Role info

Cant Create User using Delegated Admin Console

Hi All,
./imsimta version
Sun Java(tm) System Messaging Server 6.2-3.04 (built Jul 15 2005)
libimta.so 6.2-3.04 (built 01:30:02, Jul 15 2005)
Linux nile.jlcc.com 2.6.11-1.1369_FC4 #1 Thu Jun 2 22:55:56 EDT 2005 i686 athlon i386 GNU/Linux
I configured DA ..and all the things were working fine including the error im facing now..
for the past two days
I couldnt create user using DA console..but I can able to create from commadmin
the log shows..
HTTP Status 500 -
type Exception report
message
description The server encountered an internal error () that prevented it from fulfilling this request.
exception
javax.servlet.ServletException: Uncaught exception
     com.iplanet.jato.ApplicationServletBase.onUncaughtException(ApplicationServletBase.java:1415)
     com.sun.comm.da.WizardWinServlet.onUncaughtException(WizardWinServlet.java:98)
     com.iplanet.jato.ApplicationServletBase.fireUncaughtException(ApplicationServletBase.java:1164)
     com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:639)
     com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:473)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:767)
     com.sun.comm.da.WizardWinServlet.service(WizardWinServlet.java:111)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:860)
     sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     java.lang.reflect.Method.invoke(Method.java:585)
     org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:249)
     java.security.AccessController.doPrivileged(Native Method)
     javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
     org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:282)
     org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:165)
     java.security.AccessController.doPrivileged(Native Method)
     com.sun.comm.da.LoginFilter.doFilter(LoginFilter.java:128)
root cause
com.iplanet.jato.NavigationException: Exception encountered during forward
Root cause = [java.lang.NullPointerException]
     com.iplanet.jato.view.ViewBeanBase.forward(ViewBeanBase.java:380)
     com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:261)
     com.sun.web.ui.view.wizard.CCWizard.handleNextButtonRequest(CCWizard.java:730)
     sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     java.lang.reflect.Method.invoke(Method.java:585)
     com.iplanet.jato.view.command.DefaultRequestHandlingCommand.execute(DefaultRequestHandlingCommand.java:183)
     com.iplanet.jato.view.RequestHandlingViewBase.handleRequest(RequestHandlingViewBase.java:308)
     com.iplanet.jato.view.ViewBeanBase.dispatchInvocation(ViewBeanBase.java:802)
     com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:740)
     com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:760)
     com.iplanet.jato.view.ViewBeanBase.invokeRequestHandler(ViewBeanBase.java:571)
     com.iplanet.jato.ApplicationServletBase.dispatchRequest(ApplicationServletBase.java:957)
     com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:615)
     com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:473)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:767)
     com.sun.comm.da.WizardWinServlet.service(WizardWinServlet.java:111)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:860)
     sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     java.lang.reflect.Method.invoke(Method.java:585)
     org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:249)
     java.security.AccessController.doPrivileged(Native Method)
     javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
     org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:282)
     org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:165)
     java.security.AccessController.doPrivileged(Native Method)
     com.sun.comm.da.LoginFilter.doFilter(LoginFilter.java:128)
root cause
java.lang.NullPointerException
     com.sun.comm.da.view.NewUserSummaryPageViewBean.beginDisplay(NewUserSummaryPageViewBean.java:223)
     com.sun.web.ui.taglib.wizard.CCWizardTag.getWizardPageHTML(CCWizardTag.java:1560)
     com.sun.web.ui.taglib.wizard.CCWizardTag.appendPageletBodyContentHTML(CCWizardTag.java:668)
     com.sun.web.ui.taglib.wizard.CCWizardTag.appendWizardBodyHTML(CCWizardTag.java:658)
     com.sun.web.ui.taglib.wizard.CCWizardTag.getHTMLStringInternal(CCWizardTag.java:469)
     com.sun.web.ui.taglib.common.CCTagBase.doEndTag(CCTagBase.java:114)
     org.apache.jsp.com_005fsun_005fweb_005fui.jsp.wizard.WizardWindow_jsp._jspx_meth_cc_wizard_0(WizardWindow_jsp.java:301)
     org.apache.jsp.com_005fsun_005fweb_005fui.jsp.wizard.WizardWindow_jsp._jspService(WizardWindow_jsp.java:209)
     org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:105)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:860)
     org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:336)
     org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:301)
     org.apache.jasper.servlet.JspServlet.service(JspServlet.java:251)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:860)
     sun.reflect.GeneratedMethodAccessor131.invoke(Unknown Source)
     sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     java.lang.reflect.Method.invoke(Method.java:585)
     org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:249)
     java.security.AccessController.doPrivileged(Native Method)
     javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
     org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:282)
     org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:165)
     java.security.AccessController.doPrivileged(Native Method)
     java.security.AccessController.doPrivileged(Native Method)
     com.iplanet.jato.view.ViewBeanBase.forward(ViewBeanBase.java:340)
     com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:261)
     com.sun.web.ui.view.wizard.CCWizard.handleNextButtonRequest(CCWizard.java:730)
     sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     java.lang.reflect.Method.invoke(Method.java:585)
     com.iplanet.jato.view.command.DefaultRequestHandlingCommand.execute(DefaultRequestHandlingCommand.java:183)
     com.iplanet.jato.view.RequestHandlingViewBase.handleRequest(RequestHandlingViewBase.java:308)
     com.iplanet.jato.view.ViewBeanBase.dispatchInvocation(ViewBeanBase.java:802)
     com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:740)
     com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:760)
     com.iplanet.jato.view.ViewBeanBase.invokeRequestHandler(ViewBeanBase.java:571)
     com.iplanet.jato.ApplicationServletBase.dispatchRequest(ApplicationServletBase.java:957)
     com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:615)
     com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:473)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:767)
     com.sun.comm.da.WizardWinServlet.service(WizardWinServlet.java:111)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:860)
     sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     java.lang.reflect.Method.invoke(Method.java:585)
     org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:249)
     java.security.AccessController.doPrivileged(Native Method)
     javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
     org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:282)
     org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:165)
     java.security.AccessController.doPrivileged(Native Method)
     com.sun.comm.da.LoginFilter.doFilter(LoginFilter.java:128)
Please Help me on this..
Ashik

you may want to post this to the email forum.

Deleting users with Delegated Admin

Similar Messages

Maybe you are looking for