Getting users disabled/deleted with disabled resources in OIM

Hi,
Consider following use case related to OIM:
To get the Users deleted or disabled on a particular date with their 'AD User' resources which are in disabled state.
By means of built in reports i can get the users disabled or deleted for particular date.... how do i get the disabled AD User resource for each user....
i can go for scheduler task but how to proceed on that?

the exact requirement here is to get the users/deleted a day before along with their 'AD User' resources which are disabled
getObjectsByTypeStatus(long plUserKey, java.lang.String psObjectType, java.lang.String psStatus)
Gets a list of all the objects of the specified type that have been provisioned for a user and are in the specified status.
What i can make out here is that:
i need to write some logic that would give users disabled/deleted say yesterday... after this i would loop in these user keys into getObjectsByTypeStatus that would give resources disabled for each user.
Am i correct?
Now how do i get the users disabled/deleted yesterday. This is realised by default Users Disabled/Users deleted report.
But how do i use it in my scheduler
Edited by: Chhavi Saluja on Jun 30, 2010 1:20 AM

Similar Messages

How to get users provisioned / enabled with all OIM Resources.

Looking for help on java / sql query on how to get all the users in OIM (9102 BP 13) provisioned/enabled status only,
with all OIM Resources available in System.
Edited by: 907571 on Apr 18, 2012 4:12 AM

select usr.usr_login, usr.usr_status, obj.obj_name, ost.ost_status, act.act_name
from oiu, usr, ost, obj, usg, act
where oiu.usr_key=usr.usr_key
and oiu.ost_key=ost.ost_key
and ost.obj_key=obj.obj_key
and usr.act_key=act.act_key
--and obj.obj_name in ('Resource Name')
--and usr.usr_status = 'Active'
and ost.ost_status in ('Enabled','Provisioned')
-Kevin

How do i prevent users to delete or disable Clear Recent History option in tools menu

i wanted to disable Clear Recent History option in tools menu,
because i want to restrict the people to delete browsing history.

Even if you disable some items in the Tools > Clear Recent History list then it is still possible to remove history items in the History sidebar (View > Sidebar > History).
*https://support.mozilla.com/kb/Clear+Recent+History
Best would be to lock the corresponding privacy.cpd.* prefs via a file mozilla.cfg
* http://kb.mozillazine.org/Locking_preferences

How to get users to start with the first episode?

I checked my stats today and found that the most recent episode of my podcast is the one the has been hit waaay more than any of the others. But I'd really prefer listeners hit the first episode first. Do other podcasters find this? Is it worth re-ordering the dates in the feed to get the fist episode to come up first in the list?
G4 Mac OS X (10.4.3)

Actually, you can change the order of items in the RSS feed without changing any of the dates or other info that is within a given item.
Select the episode you want first, cut it and then paste it at the top of the list right after the general feed info. Re-order all your episodes this way (oldest at the top, newest at the bottom). This way, if someone double-clicks the name of your feed episode 1 will be the one they get.
Also, in many podcast lists your episodes are listed in the same order in which you have placed them in your RSS feed
So you just re-arrange the items, but don't change the info in the items.
G5 dual 2.7 Mac OS X (10.4.2)
G5 dual 2.7 Mac OS X (10.4.2)

User profiles deleted with migration assistant

I just bought my daughter a new MacBook Air to replace her 3 year old MacBook Pro. When she tried using Migration Assistant to transfer her files, it totally wiped out her user profiles so she couldn't log into the MacBoook Air any longer and she had to reset her MacBook Air completely. After resetting her MacBook Air and starting from scratch, she tried using MA again, but this time none of the new files showed up anywhere. What gives? Why is this not working. The two laptops are linked via a single ethernet cable.

Apple Support Communities is a public discussion forum. Your question may draw conflicting responses from different people. Each one speaks only for himself or herself (apart from "Community Specialists," who speak for Apple.)
All responses should be understood as comments, not as technical support. Some of what passes for advice here is good, some is wrong, and some is dangerous. Use caution, do your own research, and make backups before acting on advice from anyone.

OIM - Users provisioned with different resource form versions

Hi !!
we are having some problems with different resource form versions and maybe you can help us.
We have two different versions of one resource form. One of them has 2 extra fields.
Some users were provisioned with that resource with the previous form version (no extra fields) and some with the new one (extra fields).
The problem is that now, if we try to edit that resource for the users with the old version, we are not able to edit or even see the information for those extra fields.
It seems that they have been associated with the old version and we need to change it in order to make them use the new one. Is that possible? How can we fix that?
Thanks in advance.

Alternatively you can manually update the form version in the OIM database.
If it is a small number of forms it might be easier to do that then to bother with fvc.
Best regards
/Martin

Sometimes I cannot get emails to delete

When deleteing email I will be going along then all of a sudden I cannot get emails to delete. I push the delete button and nothing happens. I also cannot get them to delete with the right click. I also tried safe mode and it happens in that mode 2. I have a Windows 7 Home Premium and the latest version of Thunderbird. I am using Viper anti virus. This is on a new computer.
Any ideas?
Jim

Try to rebuild the index file of the troubled folder.
Right-click the folder - Properties - Repair Folder

We have a long list of disabled/deleted users in AD Somehow, they are still appeared as active user in Sharepoint Online. How do we get rid of those list? Hope you can advice. Thanks.

we have a long list of disabled/deleted users in AD
Somehow, they are still appeared as active user in Sharepoint Online.
How do we get rid of those list?
Hope you can advice. Thanks.

SharePoint does not remove users from SharePoint permissions just because they were deleted/disabled in AD. This is to maintain referential integrity. In fact, when you delete a user from SharePoint, that user remains in the SharePoint content database,
just marked as deleted.
They do not have access to SharePoint given their account is deleted/disabled. But as far as automatically managing this, I'm not aware of a tool. On-prem there is Metalogix ControlPoint which does a great job of this, I haven't explored the O365 options.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

I bought a iPod touch 5 with iOS 6 I tried to set up a account and it states all free trials were used. How do I get rid of all those accounts. Also I just recently tried to download an App Store and it told me my apple user I'd was disabled, what do I d

I bough a iPod touch 5 with iOS 6.1.1. I bought it from a friend. When I tried to open a account with iCloud it says that all user Ids have been used. So now I'm unable to sign up for iCloud. Also vI just tried to download a. App from the App Store, and when I put in my password it says that my apple user I'd is disabled. Please help.

Welcome to the Apple Community.
Unfortunately once all the 3 iCloud accounts have been created on your device, you cannot create any more regardless of what you do. You will need to re-use one of the accounts that you have already created or create your new account on another device or computer.

Enabling/Disabling/Deleting AD users - Xellerate

Hi,
I have trusted resource reconciliation from AD to Xellerate. So, I am able to create/modify a user in AD and this will create/update the user in Xellerate.
But, how can I implement disable, enable and delete user logic such that when a user is disabled/enabled/delete from AD then this will be reflected in Xellerate?
Any help is greatly appreciated. Thanks in advance!

Hi,
Disable Users: Nobody can log in to the mailbox, but the data is safe and it can receive email. Once it is enabled, it is back to normal.
Delete Users: when the user is deleted all the services are removed and all data is erased. The user is deleted from our Active Directory. If you create a user with the same Name and Emial address again, no data or services are recovered.
If you disable a user, the Active Directory object remains untouched together with the mailbox data and properties, but you will not be able to access any mailbox data.
If you delete a user, the Active Directory object is removed together with all data and properties of the user.
Hope it helps.
Regards,
Blair Deng
Blair Deng
TechNet Community Support

AD Identity Service: Delete or Disable users that aren't found?

We currently set users to be "disabled" but then we have to periodically remember to go in there and delete them manually. It also creates issues with duplicate login names. Do you delete your users automatically? I've always been concerned that if something goes wrong with a sync then all my users would be deleted.

We had the same issue here, so I wrote an external operation that piggybacks on the user sync job and deletes any disabled users older than X amount of days. For instance, in our case users are deleted after 180 days of being disabled (this is a bit extreme). This way you can give yourself a few days before the users are actually deleted, but keep the process automated. There are a couple of options built in, which should be discernible from the source code. Here is the source:
package com.oracle.services.jobs;
import com.oracle.services.utility.SessionManager;
import com.plumtree.openfoundation.util.XPCalendar;
import com.plumtree.openfoundation.util.XPDateTime;
import com.plumtree.portaluiinfrastructure.resultwrapper.ASQueryResultWrapper;
import com.plumtree.server.IPTObjectManager;
import com.plumtree.server.IPTQueryResult;
import com.plumtree.server.IPTSession;
import com.plumtree.server.IPTUser;
import com.plumtree.server.IPTUserManager;
import com.plumtree.server.PT_LOCKSTATES;
import com.plumtree.server.PT_PROPIDS;
* This class takes care of the automation server job for deleting user accounts
* which have been disabled for some number of days.
* @author hross
public class DeleteDisabledAccountsJob {
     // filter for only deleting agent disabled accounts
     private static String FILTER_AGENT = "This user has been locked by a User Synchronization Job.";
     // filter for deleting all disabled accounts (including those disabled by an
     // admin)
     private static String FILTER_ALL = "";
     public static void main(String[] args) {
          // check arguments
          if ((args.length < 2) || (args.length > 4)) {
               System.err.println("usage: ");
               System.err
                         .println("DeleteDisabledAccountsJob <security_token> <num_days>");
               System.err
                         .println("DeleteDisabledAccountsJob <security_token> <num_days> all");
               return;
          // get a session from the login token
          IPTSession session = SessionManager.createSession(args[0]);
          // get a number of days
          int numDays = 0;
          try {
               numDays = Integer.parseInt(args[1]);
          } catch (Exception ex) {
               System.err.println("Number of days not a valid integer.");
               return;
          // filter all or just the agent?
          boolean filterAll = ((args.length > 2) && (args[2].equals("all")))
                    || ((args.length > 3) && (args[3].equals("all")));
          boolean test = ((args.length > 2) && (args[2].equals("test")))
                    || ((args.length > 3) && (args[3].equals("test")));
          if (test) {
               System.err.println("This is a just a test. Nothing will be deleted.");
          if (filterAll) {
               System.err
                         .println("This job will delete all disabled accounts (even those disabled by an admin).");
          } else {
               System.err
                         .println("This job will delete only users disabled by an authentication source.");
          // calculate 180 days in the past based on today's date
          XPDateTime cutOff = new XPDateTime();
          XPCalendar xpCalendar = XPCalendar.GetInstance();
          xpCalendar.Add(XPCalendar.HOUR, -(24 * numDays));
          cutOff = xpCalendar.GetTime(); // subtract 180 days from current time
          System.err
                    .println("This job will delete any user accounts disabled before: "
                              + cutOff.toString());
          // query for disabled user accounts
          IPTUserManager userManager = (IPTUserManager) session.GetUsers();
          IPTQueryResult result = userManager.GetLockedAccounts(filterAll ? FILTER_ALL
                    : FILTER_AGENT, 0, -1);
          //ASQueryResultWrapper ptqrUserLock = new ASQueryResultWrapper(result);
          for (int i = 0; i < result.RowCount(); i++) {
               // get some basic user info
               int userId = result.ItemAsInt(i, PT_PROPIDS.PT_PROPID_OBJECTID);
               String name = result.ItemAsString(i, PT_PROPIDS.PT_PROPID_NAME);
               String login = result.ItemAsString(i, PT_PROPIDS.PT_PROPID_USER_LOGINNAME);
               XPDateTime dt = result.ItemAsXPDateTime(i, PT_PROPIDS.PT_PROPID_CREATED);
//               System.err.println("Found account: (" + userId + ") " + login
//                         + ", " + name);
               // check to see if we need to delete the user
               if (dt.Before(cutOff)) {
                    if (!test) { // if test, we just want to see who we would have delted
                         // we have to try to unlock the user b/c of a bug in
                         // automation
                         // server
                         IPTUser user = (IPTUser) ((IPTObjectManager) userManager)
                                   .Open(userId, false);
                         try {
                              user.SetLockedStatus(false);
                              user.Store();
                         } catch (Exception ex) {
                              // we expect this will fail b/c of a bug
                         // make sure the account gets unlocked
                         if (user.GetLockState() == PT_LOCKSTATES.PT_LOCKED)
                              user.UnlockObject();
                         // okay, now we can delete the user
                         ((IPTObjectManager) userManager).Delete(userId);
                    System.err.println("Removed user account: " + userId + " - " + login + " - " + name);
}

Delete Button Disabled in Outlook 2010 with Exchange 2013

I recently switched from a 3rd party mail software to Microsoft Exchange. I have had some users ask me why the Delete button is disabled. I didn't enable any special policy to cause this, and the Delete key on the keyboard will delete messages.
The disabled Delete button I am referring to is in the Home ribbon and the right-click menu for selected e-mail(s). Is this standard behavior for Exchange, and can it be changed?

It so happens that I have an XP VM with Outlook 2007. That having been said, as previously mentioned, before testing, I (thought I) could confirm the same consistent behavior in the following configurations:
WinXP + Outlook 2003
Win7 + Outlook 2010
Each of these systems was using a different user account, and I have tried folderview repairs in EMC to no avail.
Strangely, WinXP + Outlook 2007 does not appear to exhibit the behavior. In this test case, the profile and OST were just created, but switching to folderview or moving the reading pane to the bottom did not affect the behavior.
Given that information, I proceeded to re-verify, and I hadn't checked winXP + Outlook 2003 because the computer in question had been upgraded to Outlook 2010. However, I verified the issue does still exist there. Next, I proceeded to check another
computer that I thought would be WinXP + Outlook 2003, but it had also been upgraded to Outlook 2010. This computer did not have the issue, and this leads me to a new theory about the cause (but no closer to resolution). For the record, of the
three computers (two exhibiting the issue, one not), only one has the Adobe plugin mentioned in my last post in response to Diane Poremsky, so the issue doesn't appear to be related to that.
That said, my theory follows: This is somehow related to IMAP in Outlook 2010. The computers that exhibit the issue were all previously running IMAP in Outlook 2010, and the IMAP PST filse were imported using the MailboxImportRequest feature.
I suspect this is related because of other issues that happen for these accounts. For instance, all new e-mail was only visible in OWA and not Outlook on all folders on these accounts, and I have had to have the users reset filters in the view settings
for each folder individually. I don't remember exactly which filter was somehow imported, but it definitely had to do with IMAP. This may be another red herring, but the behavior is consistent with it. I should also note that this behavior
did NOT exist when they were connected via IMAP to the old (non MS) server. I should also note that the filter behavior is somehow stored on the server (and therefore I imagine the delete button behavior could be as well), because creating a new Windows
Profile (and as such, a new Outlook profile and OST file) on a new computer did not make the IMAP filters go away.

Guys, every time I download app on iPhone, i get message that "your user id has been disabled''

guys, every time I download app on iPhone, i get message that "your user id has been disabled'

That is exactly what happened to me! I wrote to Apple and they informed me that my account had been disabled because somebody had made a complaint that their credit card had been used to buy stuff on my account without their consent thus my account was disabled and it was a permanant thing. They suggested I set up a new Id, explained I could still use my apps but would not be able to update them. I wrote back to them explaining that there was no way I would have done such a thing, that I felt that I was being penalised over something I had not control over and I had bought my apps in good faith expecting to be able to update them as required. I also pointed out that a little while ago I found that my account had suddenly changed to a USA based one so that I had reset it and the password along with the credit card attached to it. I didn't really think much about it but now I wonder if I had been hacked.
I did get a very nice email back saying that they would investigate but having waited a few days I just got an email from a supervisor saying they had closed the account, there would be no further information given and I could look at their terms and conditions. I haven't been even been told what apps were supposedly bought through my account to see if there has been a genuine mix-up with credit cards through the banking system. I feel somewhat besmirched by the whole affair; I would never do anything illegal or misuse my account but despite being a loyal Apple customer who has promoted their products at every given opportunity, both professionally and socially, I have been summararily dismissed without being given the chance to defend myself or my reputation.

Sun Convergence for user with disabled calendar service

I have Communication Suite 7 installed with the "Sun Convergence" web interface.
I create a test user with a disabled calendar service (service package platinum).
The user test logged in in Sun Convergence web interface and I'm surprised,
that the calendar for him is available.
How can I disable the calendar view in Sun Convergence for user with disabled calendar service?
Thank you.

petrahu wrote:
I'm getting the expected result with a service package for mail and calendar,
e.g. mercury, and setting the status of calendar service to inactive or disabled.The behaviour you are seeing is both "expected" (i.e. as per the current Convergence design) and "unexpected" (i.e. doesn't make sense from a DA service provisioning perspective). It is a real "can-o-worms".
The problem stems back to the "local.autoprovision" functionality provided at the Calendar Server end (enabled by default):
http://docs.sun.com/app/docs/doc/819-4654/acajh?l=En&a=view
"The first time a user logs in, the user's LDAP entry in updated to add calendar service, and a default calendar is created. The user entry must already exist in the LDAP directory. If it does not, an error is returned."
So even if the calendar service has not been granted at the Delegated Administrator end, the calendar server will "helpfully" add the required objectclasses/attributes when a client (such as Convergence) attempts to login as that user.
This means Convergence cannot automatically assume a user is not able to access the Calendar service based on the users current objectclass/attribute settings.
This leads to an existing bug for Convergence:
Bug#6871400 - "Mail only user is able to access the calendar service"
I've also created a new Change Request for Calendar Server:
RFE#6898717 - "local.autoprovision should be disabled by default"
Please raise this issue with Sun support (log a support request) if you believe the current behaviour is confusing/needs changing (i.e. fix the bug/RFE above).
Regards,
Shane.

10.9.1 used terminal with rm-rf and deleted my user data. Can I get back the deleted data? Help.

10.9.1 used terminal with rm-rf and deleted my user data. Can I get back the deleted data? Help. I really just need mail file and desktop files recovered.

If data were on the SSD drive with TRIM - practically no chance. If HDD - use DIY recovery software such as DiskDrill or DataResue.
As quickly as possible turn off the drive where deleted data.
Use an external HDD with installed OSX for data recovery.
Alex
Apple Certified Support Professional

Getting users disabled/deleted with disabled resources in OIM

Similar Messages

Maybe you are looking for