CSUtil -s and list of (deleted) users?

I would like to
get a text list of the defined users so I work with csutil.exe -d. This
tool writes a dump.txt file that includes deleted users (I don't see
them via the web interface).
I tested csutil -s to "make database smaller
by removing deleted users" as it is written in the doc but it doesn't work.
Is there a way to get a copy of the user list presented on the web
interface ? If not, how can I identify deleted records in the dump file
(a status fields anywhere ?).

I searched some TAC cases for answers to your questions.
Here's what I found:
"Like many relational databases, the CiscoSecure user database handles the deletion of records by marking deleted records as deleted but not removing the record from the database. Over time, your CiscoSecure user database may be substantially larger than is required by the number of users it contains. To reduce the CiscoSecure user database size, you can compact it periodically."
It looks like to remove the deleted users, you need to compact the database with a command like this:
CSUtil.exe -d -n -l
Please refer to this link for more info about compacting the dB & to make sure you follow the precautions like backing up the database, etc.
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/csnt30/user/ae.htm#72126
Seems like once you compact the dB, you can re-run your report to dump out all the users. This time, the deleted users should not be there.
thanks
peter

Similar Messages

Unlink and remove role = delete user???

Hi All,
We are using Sun IDM 7.1.1.21 and have run into this problem. I believe it's a product bug because it doesn't make any sense. We have users in an AD resource, and they are linked to that resource in IDM using a role. If, for some reason, the user is deleted from AD, and re-setup we have to "re-link" the user because the "accountGUID" attribute has the wrong GUID for the user and IDM doesn't like that. We are doing this using Recon. When recon runs, and catches this user, the situation comes back as "Confirmed", which is fine, we are using a per account workflow to handle the changes. We then compare the GUIDs of the objects in the workflow, if they are different, we would unlink the IDM account and relink it to the new GUID. We are setting the following options on the unlink.
<set name='options.unlinkTargets'>
<list>
<s>AD</s>
</list>
</set>
<set name='options.deleteAccounts'>
<s>false</s>
</set>
and we remove the role, becuase if we do not, nothing happens. When the user object is checked in, it gets deleted from the resource. I'm sure this is happening becuase the accountID DOES exist (when the user is re-setup on the back-end the same DN is given to the user). Obviously this result is undesireable. So now I have 2 questions.
1. Am I doing this wrong?
2. Why would IDM delete an account when deleteAccounts and unlinkTargets are explicitly set on the checkin?

OK. I figured out where the problem was. Renaming the accountGUID without removing the role only caused a "rename account to same name" error. I was not setting the correct options when removing the role. I needed to set:
<set name='options.noDelete'>
<s>true</s>
</set>
<set name='options.deleteUser'>
<s>false</s>
</set>
This did the trick. The roles were removed and the user unlinked without any harm done to the resource account. I was then able to re-add the roles and relink to the existing resource account without a problem.
Thanks.

Deleted users list in SRM server

Hi
I wanted to extract a report from 2009 jan 1 to till date what are the users are deleted from the system SRM application server?
Any tcode /report helps to know the above information?
i indeed appreciate your help.
br
muthu

Hi Muthu,
PLZ goto tcode:SUIM>change documents>select user tab---->and select only deleted user as * and select the required date to know the deleted users.
thanks
Praveen

How to find roles of a Deleted User.

Dear Gurus,
Please assist me that how to find all the previous roles once the user has been deleted accidentally.
Thanks,
Regards,
Kalyan Kumar.

Hello Kalyan,
you can find out the User classification and the status of the user (locked , deleted or active) in System measurement.
i.e.... "usmm" T-code for System measurement, this will show you the list of deleted users.
after finding out name of the deleted user/users, you can search for the customized profiles created in your system land scape.
in my organization, we will create profile for the end user based on SOD (list of T-codes, Organisational data and activity on the T-codes.
i.e... if user name is "kalyan" we will create a profile by following nomenclature.
"zKalyan" or "Ykalyan".
you can search your SAP system for the list of profiles avaliable, and also go through the user matrix.
"scum" is central user administration, here you can find more information on the users.
Best regards,
Raghav.
reward points, if helpful to you##

Snow Leopard Server - Can't delete users in WGM?

Hi!
I have 2 Mac OS X Server 10.6.4 machines. One is an OD-master and the other is a replica. Since last week I haven't been able to delete user accounts in WGM. It doesn't give me any error and at first glance it looks like the account is deleted, but the account pops up again when searching for that user i WGM.
I also noticed that Server Admin freezes and need a force quit when I click the "Settings" tab for det OD-service.
I suspect the two problems are related somehow, but I can't figure out how to fix them. I've read through a couple of forum posts here but couldn't find anyone with a similar question/problem.
Changing passwords and other settings work fine on user accounts. The syncing between OD master and Replica also works.
The problem is identical on both machines. Deleting accounts doesn't work and Server Admin crashes when checking the "settings" tab on the OD-service.
Has anyone got a clue what I should do och look for?

I managed to solve the problem a couple of days ago. This is what I did.
At first I thought Server Admin crashed when choosing the OD-service, but I was mistaken. It didn't crash, just stalled for a long time (up to 20 minutes as soon as I clicked on something in the OD-service).
My main concern was that my latest OD-backup was a month old and I really wanted a fresh archive before I tried to rebuild the OD-master. So if you already have a working archive you can skip the next part.
Another problem was that the archive-feature did not work at all on any of my two servers.. I could reach the archive-function (with 20 minutes delay on each click) but it resulted in no archive and didn't give me any errors, so I'm glad I checked to see that an archive was actually made. So I promoted my replica to an OD-master and after that Server Admin didn't freeze for 20 minutes any more in the OD-service and the archive function worked again. So I did a fresh archive.
Now that I had a fresh OD-archive I demoted the (original) OD-master to a Standalone server. Then made it an OD-master again and imported the OD-archive I made from the replica. Everything worked fine and I could delete users again and Server Admin didn't freeze any more. I hooked up the replica to the OD-master and since then I've had no problem. I hope this helps someone else with the same/similar problem.

User Comparison - Job showing output deleted users in Sol.man

Hi All,
I scheduled the User Comparison job for every 4 hrs with respective of the program RHAUTUPD_NEW. In the output it is showing me the list of deleted users as well. like "User EAMANITR does not exist" in Sol.man.
I am sure it is not a problem, but want to knwo what the job output showing this list as well.
let me know if any one come up with this issue.
SV

Hi,
Have you checked OSS note 1280891?
Cheers

How to reconcile deleted users with GTC

Hi all,
I'm wandering wich is the best approach to perform reconciliation of deleted users using GTC connector. (It doesn't concile it by default, does it?).
I don't know if it's a bad idea to mark the deletion in the target table row (setting a value in a column) and revoke the user through an Entity Adapter. Should it be better to develop a custom Scheduled Task for this?
Any tip will be considered!
Thanks in advance,

Hi,
Yes I run both Schedule task as "time-programmed" . I usually run creation task first and then it is followed by delete recon task.
I am not fully understanding what do you mean by starting GTC generated task automatically? Please give me more insight before I comment on this.
For delete recon you need to do following
HashMap userValues[];
userValues = null;
userValues=createDeleteHashMap(results);
Set deletedAcc = reconUtil.provideDeletionDetectionData(resourceObject, userValues);
missingUser = reconUtil.getMissingAccounts(resourceObject, deletedAcc);
long reconEvent[] = reconUtil.deleteDetectedAccounts(missingUser);
Here userValues is array of Hashmap which have all the non revoked user.
So your steps should be.
1.Query the table wich store all active users and store them in an array of hashmap
2.Pass it to provideDeletionDetectionData method.
3.pass step 2 result set to getMissingAccounts method.
4.Pass step 3 result set to deleteDetectedAccounts.
Alternatively you do following.If in your query you can find out which user is deleted and if you are oim9.1 then follow these steps.
1.Query the table and get revoked/deleted user and store then in a hashmap.
2.Use createDeleteReconciliationEvent(java.lang.String psObjName, java.util.Map poAttributeList) to create the delete reconciliation event.
First approach is bit risky because if somehow in your table or view all the record are delete or revoked or by any error GTC connector did not find any record then it will revoked all the user from OIM which can lead to disaster as you are doing trusted recon.
Please let me know if you have any more questions.
Regards
Nitesh

ADCS Delete user process task

I am very sorry to ask this question to you, But I am helpless here,
Dev team has implemented Provisioning/DeProvisioning process for AD. If user terminated, OIm first disable the user's AD account and after 21 days, its deletes the AD account. I am not able to find, how and when "ADCS delete user" task has been invoked by oim. Can any one please help me to find it out.
Thanks.

There should be a schedule task which runs daily and check for the Termination Date for all these users, if its > 21 days then it must have been manually inserting this task in the user's AD resource profile

We have a long list of disabled/deleted users in AD Somehow, they are still appeared as active user in Sharepoint Online. How do we get rid of those list? Hope you can advice. Thanks.

we have a long list of disabled/deleted users in AD
Somehow, they are still appeared as active user in Sharepoint Online.
How do we get rid of those list?
Hope you can advice. Thanks.

SharePoint does not remove users from SharePoint permissions just because they were deleted/disabled in AD. This is to maintain referential integrity. In fact, when you delete a user from SharePoint, that user remains in the SharePoint content database,
just marked as deleted.
They do not have access to SharePoint given their account is deleted/disabled. But as far as automatically managing this, I'm not aware of a tool. On-prem there is Metalogix ControlPoint which does a great job of this, I haven't explored the O365 options.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Trying to download a movie on a laptop. tellls me i can't play it on that computer because my apple account has too many users. how do i see who is listed as a user so that i can delete one if it's not needed

trying to download a movie on a laptop. tellls me i can't play it on that computer because my apple account has too many users. how do i see who is listed as a user so that i can delete one if it's not needed
please help
[email protected]

The list you saw that shows what drivers are available from Apple Software Update is based on what drivers are supplied by the vendor to Apple. So it would appear that HP has not provided Apple with a scanner driver for 10.9 (known as an ICA driver), or provided an update if one was available for a previous version of OS X, so that you can scan from Image Capture.
I checked the HP web site for your model and they don't show any scanner driver or scanning software. If there was a scanner driver, you would be able to use Vuescan.
As for the Scan button not working, the following is documented by HP
Scanning to the computer from the printer control panel is not available when you scan with Preview, Image Capture, or Printer browser methods. You must use HP Scan software to scan from the printer.
But there does not appear to be any version of HP Scan software available for 10.9. So unless someone else has some workaround, it seems that you won't be able to scan with this model of HP.

How to delete users from my shared list

I have users in my shared tab in the finder.
Some of these computers/users i dont know or dont what to have the risk of being to access my data.
How do i remove them?

Swipe your finger across the item in the list and a red delete button will pop up.

How to remove User IDs for deleted users from the Disk Quota list

Hello,
We have a computer lab setup with an Xserve managing 15 stations in the lab. Users are setup with networked home directories and quota's are setup on the drive containing the home directories to limit users' storage.
The user account and the quota limit are setup with Workgroup Manager. When a student has been gone for a while and we are sure they no longer need the account we delete their account within Workgroup Manager and move their Home folder to the trash.
When viewing disk usage in Server Admin (by selecting the volume and clicking the Quatas tab) user ids for deleted users are listed and it still shows the disk usage and quota settings for the user.
How can I remove theses user ids from the quota list?
Any help would be appreciated.
Brian

I would restore User's file structre back to normal just by copying from standby user?
Did you mean copy files to a new user profile? If so, hope this link can be helpful for you
http://windows.microsoft.com/en-in/windows/fix-corrupted-user-profile#1TC=windows-7
For the unknown user, as you said, it's probably a user account from second OS or
action. If you're annoying about this unknown user, then you can remove all occurrences of granted rights to the specified SID with this command icals [/remove[:g|:d]] <Sid>[...]] [/t] [/c] [/l] [/q]
http://technet.microsoft.com/en-us/library/cc753525.aspx
Yolanda Zhu
TechNet Community Support

I am trying to clean up my iMac hard drive and find a lot of space in 'Deleted Users'...what is this and can I delete that folder?

I am trying to clean up my iMac hard drive and find a lot of space in a folder named 'Deleted Users'...what is this and can I delete it to save space?

If a user account is deleted and the data for that account is not deleted, it is placed there. Yes, you can delete the files there.

In which table deleted user list is stored

Hi all,
I have made one user ZTEST in sap through SU01. Its details has been stored in USR01 .
When i deleted this user than the details of this user has been deleted from the tables USR01.
After deletion on which table deleted user information is stored.
Any BAPI is available which sgives the deleted table list .
Thanks & regards

Hi Lolo,
There is no table available in SAP to view the deleted user information. But you can connect to SQL & see the deleted user information.
I think the command " SQL>show recyclebin;" will show you the deleted user information.
Regards,
Mahesh Gattu

HT201401 My iphone contact list has changed and it keeps deleting my contacts. could icloud be the problem?

My iphone contact list has changed and it keeps deleting my contacts. could icloud be the problem?

Are you sharing the iCloud account with someone else?

CSUtil -s and list of (deleted) users?

Similar Messages

Maybe you are looking for