Account Disabled on Active Directory while provisioning

Question

While provisioning to Active Directory resource,it should Account Disabled on Active Directory.
I have added userAccountControl in the attributes.
I am able to read the userAccountControl value where the last digit in the hexadecimal value of it corresponds to accountDisabled.
How to achieve this? Any ideas or suggestions are welcome

Answer 1

Hi idmguru,
Below is the requirement, i found from other thread in the forum :
Scenarios:
1). User already exists in IDM and has the resources assigned to the. Their status is then set to disabled on the database, ActiveSync runs & picks up the change, our form iterates through disabling the resources (or we've also tried setting global.disable which also worked) - result is a success. The user is flagged as disabled in IDM Lighthouse, AD account is disabled and LDAP account has been disabled via a password change (the default behaviour).
2). User does NOT already exist in IDM. ActiveSync is run, the user is created in IDM and resource accounts assigned and created, user is marked as disabled in IDM Lighthouse but is NOT disabled in AD or LDAP.
Is there a mechanism to both create AND disable a resource account at the same time? If so can this be done from an ActiveSync form or would it be customised workflow? I've tried the following in my ActiveSync which I found in the forums but this doesn't create the "disabled" accounts on AD or LDAP - it only marks the IDM account as disabled.
<Field>
<Disable>
<neq>
<ref>activeSync.accountstatus</ref>
<s>D</s>
</neq>
</Disable>
<Field name='waveset.disabled'>
<Expansion>
<s>true</s>
</Expansion>
</Field>
<FieldLoop for='name' in='waveset.accounts[*].name'>
<Field name='accounts[$(name)].disable'>
<Expansion>
<s>true</s>
</Expansion>
</Field>
</FieldLoop>
<FieldLoop for='name' in='waveset.accounts[*].name'>
<Field name='update.accounts[$(name)].disable'>
<Expansion>
<s>true</s>
</Expansion>
</Field>
</FieldLoop>
</Field>
The code works fine for Scenario 1 but NOT Scenario 2. I am not sure why the code does not work for Scenario 2
Any idea on how to achieve Scenario 2 requirement?
Regards and thanks
idm6x