Can an AD-disabled user still use Lync?

Lync 2013 Server/ Lync 2013 Client.
Here's the scenario:  A Lync-enabled user leaves the company.  After they're gone, the AD account is disabled.  A couple of days later, another user notices that the user who had left is still visible in Lync AND their presence green (i.e.
available.)  The assumption is that the former user has Lync running on their home PC..
Is this normal?  I assumed that if the AD account of the Lync user were disabled, the user would no longer be able to use Lync.  For instance, the disabled user can no longer access their mailbox even though the mailbox still exists. 
So why would it be different for Lync?
We ended up having to specifically disable the Lync account of the former user, but why should this even be necessary?
Thanks in advance..

This is entirely possible.
Also take a look at this post: http://www.expta.com/2011/03/disabling-user-in-ad-does-not-disable.html
Basically to ensure a user is disabled in Lync, you should disable them on the Lync Server, not just rely on disabling them in AD.
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer"
Georg Thomas | Lync MVP
Blog www.lynced.com.au | Twitter
@georgathomas
Lync Edge Port Check (Beta)
This forum post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Similar Messages

  • Disabled users still on Lync and client contact list

    Any way I could cleanup disabled users in Lync? I also realized such users are still on contact list of users. Any process to automatically clean users up when they are disabled in Active Directory. Am seeing terminated users in the Lync systems.
    Any help will be appreciated.
    Thanks!
    Alert from TechNet Posting

    You need to disable users for Lync Server, as the address book updates, the contact information updates, then non-existing contacts disappear automatically.
    Lisa Zheng
    TechNet Community Support

  • Can I run a User Query using SDK?

    Hi I am new to SDK development.
    Can I run a user query using SDK?  what I am after is, when the user clicks a button on my screen, I want to run the user query already in the system.
    If this can be done, does anyone know how to do this? I have not been able to find a way of doing this so far. appreciate any help here.
    Thanks,
    Indika.

    Hi,
    I have an additional question to this thread. Does anyone know a way how to run an user query, and how to pass some parameters to it, so the user doesn't have to write them down manually?
    For example, I add a button on a Bussines partner form and when this button is clicked, I want a query to be started with parameter %1 = businnes partner's code...
    Is there some way how can I do this?
    Thanks
    Bohous

  • Disabled users still in address book

    We are running Exchange 2000 on a Windows 2003 / AD platform. Disabled users are still appearing in the Outlook 2003 address book. Shouldn't they be automatically hidden? Users are accessing these addresses and creating emails, but of course can't get to the users.
    Firstly, how do I make a list of all users that were disable but are still in the address list. Secondly, what's the best method to hide them (without having to access each one separately) ?
    Thanks.

    Well, just disabling user account doesn't remove the user name from address book. You need select an option "Hide from Exchange address lists" available in Exchange Advance tab of user properties.
    I used to get the list of disabled users which are not hidden in GAL with below custom LDAP query in Exchange 2003.
    Open ADU&C, Right click on Domain & click on Find, in Find select "custom search", select Advance tab and in "Enter LDAP Query" paste below ldap query and click on Fiind Now.
    (mailNickname=*)(userAccountControl=66050)(!msExchHideFromAddressLists=True)
    You may need to verify the value of an attribute "userAccountControl" of any disabled user with ADSIEdit.msc and give that value instead of 66050 because that one I used in Exchange 2003 and Windows 2003 environment.
    Amit Tank | MVP - Exchange | MCITP:EMA MCSA:M | http://ExchangeShare.WordPress.com

  • Can't allocate any users to use iCal Server

    Have successfully set up 10.6.1 server. DNS and Open Directory both OK. iCal service is running on default port 8008 and is using the default server dns name.
    The problem we're having is that in Workgroup Manager we cannot allocate a user to use iCal. Under the Advanced settings tab for a user where you enable calendaring for the user the pull down menu only shows "No calendar host selected", the configured iCal server is not displayed.
    This has occurred on three separate fresh installs on three separate boxes.
    Any ideas appreciated!

    That doesn't really make any sense. I can connect iCal 10.5.x clients to the iCal 10.6 test server just fine and they pulled down test data. I plugged in account details and connected to the users iCal server calendar account.
    Perhaps you misunderstood them? The guy I spoke with told me that you manage almost all calendar data on the wiki/mypage tool now and not in workgroup manager. Users can access their calendar on mypage, groups manage their calendars via the wiki. It may not be ideal (I would have preferred using workgroup manager for this stuff) but it seems to work. You can also manage delegation to your calendar via the iCal client. If something specific for you isn't working, it'd probably be better to open a thread on these forums and post details if a specific feature isn't working so people can help you.
    The only feature I really find lacking with this web method of management is that you can't really have a user without that user having a calendar (and having access to that calendar). The SACL only prevents them from connecting via iCal client but they can still connect via the mypage tool.
    Also, 10.6 is a new server version and 10.5 had many of these same issues (perhaps more). Either you have this on a test server and you wait it out and just report fixes to Apple or you jumped the gun and installed it on a production server at which point you accepted the risk of a new server OS. Doing so on client systems is one thing (they're easily rolled back), servers is a completely different matter and should be handled with care. Obviously 10.5.x server matured enough for you to want to use it so 10.6 likely will as well so just bide your time on a test server and try to improve the release by reporting bugs or roll back to 10.5 and continue to use it until you're ready to jump to 10.6.
    In short, as of now, the "enable calendaring on this host" has nothing to do with whether a user can access iCal services on a 10.6.1 host. If you create a user in workgroup manager, the current behavior is that they now have at a bare minimum, a web calendar. If you enable the SACL for iCal, I believe you can limit access via the iCal client but they'd still have web access. If this behavior is poor (I believe it is and would prefer more fine grained control) then make sure and report it.

  • How Can I move contact users saved on lync client 2010 to lync client 2013 ?

    i did a migration between lync 2013 and lync 2010 everything done ok 
    now when move the users from the lync 2010 pool to new pool  and sign in  with my user i couldn't  see any contact on my old list 
    there was DBIMPEXP.exe tool but this tool not exist in lync 2013
    i took a backup for all users but how can i restored them to new client
    the backup file on lync 2010 is "xml"
    and in the lync 2013 is "zip"
     thank you all

    Please check the following blog.
    http://www.shudnow.net/2012/10/09/dbimpexp-exe-functionality-integrated-into-lync-2013-preview-management-shell/
    Lync Server 2013 Preview has deprecated the use of DBIMPEXP.exe. 
    There are now native Lync Mangement Server cmdlets to provide the equivalent.
    You can use the command convert-csuserdata to convert between a 2010 XML file provided from DBIMPEXP.exe and a ZIP file provided from Export-CSUserData.
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • How can I allow network users to use File Sharing on 10.8 Server?

    I am in the process of setting up a new OS X 10.8 Server. I have exported/imported the network users from my previous OS X 10.6.8 Server using Workspace Manager. I have re-entered the passwords of the users. I have existing clients running (stil logged in).
    I have set up the File Sharing service in Server.app. I have several mount points. I have made the Users mount point available for home directories over AFP.
    Now, the system administrator can connect to the server and get access to the file shares. So the basic file sharing system works.
    Also: the users on a client can get there password verified (e.g. when unlocking screen protection) by the server. It is just AFP they can't get access to, while the system administrator account (OD /Local on the server) can be used. So, the password in the server is OK too. It seems to be a matter of privileges.
    But no network user (OD user in directory /LDAPv3/127.0.0.1 on the server) can get access. Where can I give network users privileges for File Sharing on the server?
    I did try to add either the "Open Directory Users" group or a specific user that was imported into com.apple.access_afp. If I do that, there is partial success. I can connect to the server from the client with a user account other than system administrator from the server (but connecting is slow). But Mobile Home Sync does not work:
    1:: [13/04/05 16:11:10.379] Scheduling next sync of "HomeSync_Mirror" at 2013-04-05 14:11:20 +0000
    1:: [13/04/05 16:11:20.782] ==========================================================
    0:: [13/04/05 16:11:20.782] Starting automatic sync of "HomeSync_Mirror".
    1:: [13/04/05 16:11:20.786] Peer "network" reports changes since last sync.
    1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:alias:]: isRemote = NO
    1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: peer = <SPeer_FS:0x7fd5a5009520> = local, optionalStoreID = (null), peer.storeIDString = *
    1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: rootPath        = /Users/gerben
    1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: storePath       = /Users/gerben/.FileSync/store.filesyncstatetree
    1:: [13/04/05 16:11:20.787] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: rootAlias       = {path='/Users/gerben', targetName='gerben', volumeName='Macintosh HD', type=DIR, volumeCreateDate=2010-08-10-12:58:16, targetCreateDate=2011-08-28-18:39:13, parentDirID=37638, nodeID=3003598, filesystemID=0000 ('0000'), signature=0x482b ('H+'), isBootVolume=YES, isAutomounted=NO, isEjectable=NO, hasPersistentFileIDs=YES, mounted=YES, url='file://localhost/'}
    0:: [13/04/05 16:11:20.789] -[SPeer_FS _mountServerCallbackShares:status:]: received error 64
    0:: [13/04/05 16:11:20.790] EXCEPTION: _mountServerCallbackShares:status: (Host is down) <-[SPeer_FS mountPeerVolumeWithURLString:] (Peer-FS.m:446): "'(-1)' error 64">
    0:: [13/04/05 16:11:20.790] USERINFO: {
    0:: [13/04/05 16:11:20.790]     NSLocalizedDescription = "Host is down";
    0:: [13/04/05 16:11:20.790] }
    0:: [13/04/05 16:11:20.790] BACKTRACE: {
    0:: [13/04/05 16:11:20.790] ? | 0x105cb79b7  
    0:: [13/04/05 16:11:20.790] ? | 0x105cbf0e5  
    0:: [13/04/05 16:11:20.790] ? | 0x105c2c866  
    0:: [13/04/05 16:11:20.790] ? | 0x105c2babd  
    0:: [13/04/05 16:11:20.790] ? | 0x105c2acb4  
    0:: [13/04/05 16:11:20.790] ? | 0x7fff858bb72a
    0:: [13/04/05 16:11:20.790] ? | 0x7fff858bb6a2
    0:: [13/04/05 16:11:20.790] ? | 0x7fff874cf8bf
    0:: [13/04/05 16:11:20.790] ? | 0x7fff874d2b75
    0:: [13/04/05 16:11:20.790] }
    1:: [13/04/05 16:11:20.790] Peer "network" is unable to sync. (-[SPeer_FS mountPeerVolumeWithURLString:] (Peer-FS.m:446): "'(-1)' error 64")
    0:: [13/04/05 16:11:20.790] Peer "network" is unable to sync. Not enough peers will be available to continue syncing.
    0:: [13/04/05 16:11:20.790] Aborting sync of "HomeSync_Mirror".
    1:: [13/04/05 16:11:20.790] -[SPeer abortSync] "local"
    1:: [13/04/05 16:11:20.797] -[SStore_FS setupWithAlias:andRef:] (Store-FS.m:447): unlink('/Users/gerben/.FileSync/.fstemp.QW1Gh-bhvgEhVwmG3.noindex')
    0:: [13/04/05 16:11:20.798] EXCEPTION: !IF <-[SPeer(protected) doPrepareForSyncWithResolvedConflicts:] (Peer.m:1149): "'(([self checkAbort]))'">
    0:: [13/04/05 16:11:20.798] BACKTRACE: {
    0:: [13/04/05 16:11:20.798] ? | 0x105c2bb66  
    0:: [13/04/05 16:11:20.798] ? | 0x105c2acb4  
    0:: [13/04/05 16:11:20.798] ? | 0x7fff858bb72a
    0:: [13/04/05 16:11:20.798] ? | 0x7fff858bb6a2
    0:: [13/04/05 16:11:20.798] ? | 0x7fff874cf8bf
    0:: [13/04/05 16:11:20.798] ? | 0x7fff874d2b75
    0:: [13/04/05 16:11:20.798] }
    1:: [13/04/05 16:11:20.798] -[SStore_FS deleteStateTreeTurdFile] (Store-FS.m:476): unlink('/Users/gerben/.FileSync/store.filesyncstatetree.statetree_dirty')
    1:: [13/04/05 16:11:20.798] Peer "local" is unable to sync. (-[SPeer(protected) doPrepareForSyncWithResolvedConflicts:] (Peer.m:1149): "'(([self checkAbort]))'")
    0:: [13/04/05 16:11:20.798] Peer "local" is unable to sync. Not enough peers will be available to continue syncing.
    1:: [13/04/05 16:11:20.798] EXCEPTION: SFAbortedException <-[SSyncEngine _waitForPeers:] (SyncEngine.m:1922): "'(_abort)'">
    1:: [13/04/05 16:11:20.798] -[SSyncEngine threadMain_SyncEngine_sync:]: sync failed with exception "-[SSyncEngine _waitForPeers:] (SyncEngine.m:1922): "'(_abort)'"".
    0:: [13/04/05 16:11:21.066] Sync of "HomeSync_Mirror" encountered errors. (_mountServerCallbackShares:status: (Host is down))
    0:: [13/04/05 16:11:21.067] Last successful sync completed at 2013-04-04 20:17:15 +0000.
    0:: [13/04/05 16:11:21.067] Finished sync of "HomeSync_Mirror".
    1:: [13/04/05 16:11:21.067] Scheduling next sync of "HomeSync_Mirror" at 2013-04-05 14:31:21 +0000
    1:: [13/04/05 16:11:21.284] 1-pass sync of "HomeSync_Mirror" took 0.02 seconds

    Hi Gerben,
    Try creating a brand new user, that's not imported and see if that works. Every user/group has a little gear in the Server.app/Users or Groups which allows specific access to specific services, perhaps filesharing is off in that section?
    Is your DNS setup properly? Can you verify that clients can see the FQDN of your server?
    After setting up the Users folder for mobilehomes, did you check whether the group and the separate users have access to filesharing? I am able to select the correct homefolder /Users and restrict the homefolder size.
    Goodluck!
    Jeffrey

  • How to Generate 250 Users Conference using Lync 2013 Stress and Performance Tool

    How to Generate 250 Users N-way IM Conference using Lync 2013 Stress and Performance Tool.
    Please Let know the configurations to generate the XMLs. We are not able to create more than 70 users N-way IM conference though during configuration, we opted for 300 users conference for Large Conference (in custom setting).
    The tool somehow does not create the number of participants as indicated. Is there any way to troubleshoot why it's not generating the expected load.

    Hi,
    Would you please elaborate more about your Lync environment?
    Please check if you meet the following configuration requirements:
    Set the MaxMeetingSize option to 1000. (The default is 250.)
    Set the AllowLargeMeetings option to True.
    Set the EnableAppDesktopSharing option to None.
    Set the AllowUserToScheduleMeetingsWithAppSharing option to False.
    Set the AllowSharedNotes option to False.
    Set the AllowAnnotations option to False.
    Set the DisablePowerPointAnnotations option to True.
    Set the AllowMultiview option to False.
    Set the EnableMultiviewJoin option to False.
    More details:
    http://technet.microsoft.com/en-us/library/jj205074.aspx
    Best Regards,
    Eason Huang
    Eason Huang
    TechNet Community Support

  • How can I to "disable user logout", in Hyperion.

    I want to redirect users to a custom page on logout from Hyperion Workspace / Interop / Planning / etc...
    How and where do I configure this in Hyperion.
    The Admin guide says you can do this in the Servlet configurator, but I do not see any settings for logout.
    Kindly HELPPPPP.
    Thanks,
    Sasi

    First of all:
    1) are you updating validateDate.js
    2) are you getting any java script error at the left bottom of the page
    3) have you write function that you are calling in the drawbutton. ex userValidate() in my case,
    if not write some thing in that function, like:
    function userValidate() {
         alert("Its not working :) ");
    return;
    4) delete the cookied and temp internet files from the Internet options.
    5) first try DrawCmdBtn("ValidateBtn1", "Validate",null,"userValidate()","Validate the data on this form"); coz its tested, thn try to add URL in place of null
    request you make it fast coz its 12:05 Am in india and i m still in the office, i need leave for my place :)
    dont forget to mark the answers as helpful if you think they are :)
    Cheers...!!!

  • Can't avoid end user license, using acrobat.jar

    Hi everybody!
    I want to display a pdf from my Swing application, so I've decided to use Adobe Acrobat Viewer (acrobat.jar). But, when I run SampleReader example, first it appears the Adobe Acrobat Viewer's End User License Agreement, before the viewer itself.
    What can I do to avoid the license agreement? Can I get any license anywhere? Help me please!
    Thanks!!

    I think Adobe have made their software behave this way on purpose, because they want it to be that way. I don't think this has anything to do with Swing.
    Also you don't need to "get any license anywhere". The whole point of an EULA splash screen is that when you click "I Accept" or whatever, that is when you get the license.
    Cheers,
    Matt.

  • Can I build an user Interface using a proccess with Human Task?

    Hi,
    I'm building an application, web application, with a several screens. The application just will be used for entering some data and depending on the data entered, some bpel process will be launched.
    I'm thinking about implementing a MVC using a BPEL Process with Human Task. I mean: I'll make everything with bpel process (*including the application*). I would make a bpel process with some human task. This process would be like a Spring Webflow file or similar. Each screen wouldl be a human task but with synchronus nature. Will it be possible? Will it be so complicated? Is it usual?
    Other way would be making a web application to enter data and then launch a proccess that will record the information in the database. That would be the normal way.
    Thank you so much.

    Hello,
    There's a more powerfull solution you may use.
    You can create a View. Some Views can be updatable (it means that it's possible to update
    the Table from the View) and, you can add constraints (Primay Key) on a View.
    For instance:
    CREATE OR REPLACE VIEW {color:red}User2.view_name{color}
    ({color:red}col1{color}, {color:red}col2{color}
    UNIQUE RELY DISABLE NOVALIDATE,
    CONSTRAINT {color:red}pk_view{color}
    PRIMARY KEY {color:red}col1{color}) RELY DISABLE NOVALIDATE
    ) AS
    SELECT {color:red}col1{color},{color:red}col2{color} FROM {color:red}User1.Table1{color};This example is from the link bellow:
    [http://www.psoug.org/reference/views.html]
    Hope it can help.
    Best regards,
    Jean-Valentin

  • Photoshop 13 wont install off disc.  Can I download it and still use the serial number off the box?

    Tried everything to install Photoshop Elements 13.  Sits at 11%.  There is a C++ issue even though there is no issue!!  My question is can I download it from Adobe and use the serial number off the box?

    Yes, you can download and use the serial number you have.
    PSE 10, 11, 12,13 - http://helpx.adobe.com/photoshop-elements/kb/photoshop-elements-10-11-downloads.html
    You can also download the trial version of the software thru the page linked below and then use your current serial number to activate it.
    Be sure to follow the steps outlined in the Note: Very Important Instructions section on the download pages at this site and have cookies enabled in your browser or else the download will not work properly.
    Photoshop/Premiere Elements 13: http://prodesigntools.com/photoshop-elements-13-direct-download-links-premiere.html

  • I have been given a apple power pc g5 dual 2, can i update it and still use it, also when it asks to update it asks for a password which i dont know , please help ...

    i have been given an apple mac powere pc g5 , can i update it and use it normally also when it asks to update it asks for a password which i dont have , can this be reset ?

    Updating or upgrading depends on what version of OS X you are running. A G5 Mac can not go further than Leopard 10.5.8 as all later versions of OS X require an Intel preocessor.
    Resetting or changing a password:
    For Snow Leopard or earlier:  http://support.apple.com/kb/HT1274

  • Can I uninstall CS6 but still use it when I install it again?

    I purchased the creative suite cs6. I want to uninstall it for a while because I want to install creative cloud. I just wanted to know if I will still be able to use cs6 again?

    Yes.
    Mylenium

  • Need to disable users from using nquser and nqpassword in the url with SSO

    Is this possible in OBIEE or do I need to creat a mod_rewrite rule to remove nquser= & nqpassword?

    suggestion or two in here :
    http://kr.forums.oracle.com/forums/thread.jspa?threadID=295697&messageID=3128576
    I always thought there is tag that goes in either instanceconfig.xml or another config somewhere (SSO?) to disable this, cant seem to find the reference to it anywhere.

Maybe you are looking for