Third-Party User Management Tools

Question

I'm looking for recommendations for third-party user management tools that can do the following:
- Identify and bulk-expire/no visibility users that are inactive for >XXX days
- Identify users with auto-forward rules
- Bulk-delete inactive accounts (from GW database only, not eDirectory accounts)
- Maybe even bulk-move inactive/expired accounts to a "dead accounts" post office?
I have an immediate mandate to clean up our environment, and I don't see how to do this in bulk with existing native tools. It's just one guy (me) versus 42 post offices and 23,000 user accounts...
Thanks!

Answer 1

You can create your own tools using the GroupWise Administrative Object API and the GroupWise Object API.
Please refer to the Cool Solutions article I wrote ( shameless self promotion ) "Scripting GroupWise" - Scripting GroupWise | Novell User Communities for more information on the GroupWise Admin API. I suggest that you modify the script listUser.vbs to include domain name ( GWUser.PostOffice.Domain.Name ) , post office name ( GWUser.PostOffice.Name ), visibility ( GWUser.Visibility ) and last login date ( GWUser.MailboxLastLoginDate). You will need to run an audit report on each post office to update the MailboxLastLoginDate property. Import the output into Excel and sort / filter accordingly for analysis.
Setting an expiration date ( MailboxExpDate ) and / or visibility ( Visibility ) is done by assigning values to the respective properties and using the commit method - e.g GWUser.Commit
Identifying accounts with auto-forward rules can be using GroupWise Object to log into each account using a trusted application key. I posted ( more shameless self promotion ) some sample code to list proxy access in another thread - https://forums.novell.com/novell-pro....html#poststop. It is not too difficult to modify the code to iterate through rules and select those that include the action forward.
Deleting is be done using the the delete method - e.g. GWuser.Delete(eadGW) where eadGW is constant with the value 1.
I would advise against using the Administrative Object API to automate moving accounts. Best practices to avoid problems during moves involve running GWCheck against user objects until there are no errors. I perform structure, contents, contents with attclip and contents with deldupfolders checks until there are no error before moving accounts. There is also the issue of how many simultaneous moves the post office agents can handle. More accurately it is the number of simultaneous purges on the source post office that need to be monitored.
If you need more help with coding let me know.
Sincerely,
Bryan Vandenberg
Originally Posted by gregamy
I'm looking for recommendations for third-party user management tools that can do the following:
- Identify and bulk-expire/no visibility users that are inactive for >XXX days
- Identify users with auto-forward rules
- Bulk-delete inactive accounts (from GW database only, not eDirectory accounts)
- Maybe even bulk-move inactive/expired accounts to a "dead accounts" post office?
I have an immediate mandate to clean up our environment, and I don't see how to do this in bulk with existing native tools. It's just one guy (me) versus 42 post offices and 23,000 user accounts...
Thanks!