Moving disabled user to another OU

Hi,
I am using Oracle Identity Manager 9.1.9.1 with AD connector 9.1.1.
When a user is disabled in oim (when the Disable check box in OIM is checked), I would like the user to be automatically moved to an another OU for disabled users.
I have created a myMoveUserToDisabledUsersOUTask with an adapter task with a xl.integration.ActiveDirectorytc.UtilADTasks.moveUser method. I have mapped the variables:
Output: String: Adapter Variables: Return variable
Input: String: Literal: String: ou=DisabledUsersOU etc....
Input: String: Adapter Variables: objectGUI
?Anyone knows which constructor I should use?
In the AD User process definition, myMoveUserToDisabledUsersOUTask, I have mapped Variable Name: objectGUI to Process Data: objectGUI.
In Process Definition - AD User, Disable User task, I have
-assigned a myMoveUserToDisabledUsersOUTask in Tasks to Generate for the AD.USER_DISABLED_SUCCESSFUL response.
-assigned myMoveUserToDisabledUsersOUTask as a Dependant task for the Disable User task.
?Is this sufficient for making the Disable User task trigger the myMoveUserToDisabledUsersOUTask?
When I test it by disabling an OIM user, I get the error messages:
Invalid Duplicate in ScheduleItem. There are other instances of this milestone in this ORC.
Error while disabling process
Unable to disable the object instance
Triggering processes related to User. has encountered an error.
Anyone knows what I should do to accomplish this?
Thanks in advance!!

Hi Saggu,
thanks for your reply.
I added a Move User task to the Disable User Adapter. I map the user parameter to objectGUID and the org name parameter to the literal ou=<disabled users>, ou=<users>, dc=x, dc=y, dc=z.
However, when I disable a user that resides in 'ou=<usersou>, ou=<users>, dc=x, dc=y, dc=y I get a NamingException error: problem 5012 (DIR_ERROR)remaining name 'cn=<user>, ou=<userou>, ou=<users>' .
Seems like the Move User task does not get the correct dn for the user. I think it's strange since the Move User task has the same objectGUID variable as its input parameter as the Disable AD User task has. And the Disable AD User task finds the user successfully.
I also get the error "destination object not exists (DIR_ERROR)". So it seems like the task finds neither the user nor the destination OU path?
Thanks!

Similar Messages

Need help with a script for moving bulk users to another OU and removing/assigning groups

I've never used PowerShell before and have been asked to track down a script that can move bulk users from one OU to another, and remove and assign new group membership. I've been googling it for about 30 minutes and haven't really gotten anywhere. If
somebody can point me in the right direction or give some tips I'd greatly appreciate it. I'm sure this kind of task has been done by several people in similar environments I just haven't been able to find those people/examples.

Here's what I've got so far...
Moving to new OU
CSV constructed like below...
DN
TargetOU
“CN=John R, OU=BB,OU=ES,OU=Students,OU=OSD,DC=usd233,=DC=local”
"OU=PRT,OU=MS,OU=Students,OU=OSD,DC=usd233,DC=local"
Import-Module activedirectory
$UserList = Import-Csv "c:\yourCSVhere.csv"
foreach ($User in $UserList) {
$User.DN
$User.TargetOU
Move-ADObject -Identity $User.DN -TargetPath $User.TargetOU
Would this work? I also need to remove the user from two groups and add them to two different groups as well. Would I need to use the addUsertoGroups and removeUserfromGroups commands?

Moving mail from one user to another

I am moving from my old iMac to a newer eMac. The eMac had been used by a housemate for Mail, and I have now set up a separate user account for them so they can access this older Mail. However, I am having trouble getting the "Mail" folder into the new user account.
I found it in the first user ~/Library/ and dragged it to the "Shared" user folder. Then I switched to the second user; where I can see it but not open it.
I then tried putting it directly in the MacHD directory, with the same result.
How do I move the info from one user to another?

How does one change ownership of a file?
The only way to do it in the Finder is doing File > Get Info (⌘I), changing the Ownership & Permissions settings, then clicking Apply to enclosed items. Problem is, this changes more than is needed and is not the most appropriate way of doing it.
Alternatively, Terminal can be used to issue a command that changes what must be changed and only that. The exact command to use would depend on what the situation exactly is and what exactly do you want to do, though, which I don’t know yet...
I want to move this out.
(I will later move mine in from another computer).
Not sure what you mean.

Error after moving user to another organiz.l unit (Edir)

I am moving users to another org. units.
For 2 users, i keeep seeing the following error in /var/log/datasync/connectors/default.pipeline1.mobility-AppInterface.log:
ERROR [Device_Thread-29] [sync:252] [userID:cn=**,ou=**,o=**] [eventID:] [objectID:] [Sync] Fatal - unable to find folder object for folderId = 2
Any idea?

If you are moving users around OUs/Orgs then you will need to remove them from the connector, wait for them to vanish, move user in eDirectory, re-add to connector. As far as I'm aware this is a limitation in all Datasync connectors that link to eDirectory.

Impact of moving a user from one organisational unit to another.

Hi
my system description :
extended classic
srm 5.00
I am new to srm and i would have some questions about the impact of moving a user from one organisational unit to another.
The senario is that:
I have moved a user from organisational unit X to Y lets say different purchasing organisation
The user had PO created in organisational unit X waiting for goods receipt but even if he is now in organisational unit Y he can still create the good receipt for the PO created in organisational unit X .
Is it ok?
Futhermore not only can he create good receipt but the good receipt take the cost center assigned in organisational unit Y whereas the PO has the cost center of organisation X.
I believe that is how the confirmation works in SRM. However is there a way for it to take account assignment from the PO instead of where the user is situated in the org hierarchy when doing confirmation.
Thanks

Thanks for your answers
Maybe i should explain how the user was moved.
I did not used users_gen because i didn't want the user's partner ID to be changed. If the partner ID is changed then the user would not be able to access PO from old Organisation Unit. (can somebody confirm this please)
I did right click on the wanted Organisation Unit then assign the user. The problem is that the relationship between the user partner ID and the new organisation unit was not maintained and the user could not create shopping cart in the new organisation unit.
To solve this issue oss note 1041701 was implemented and the issue was solved.
But before the the implementation of oss note 1041701, if the user had open items from old organisational unit he could not access PO thus could not confirm goods receipt when moved in new organisation unit.
Now this is possible he can confirm goods from old unit but the confirmation is done using cost centre of user instead of the cost centre of the PO.
Jagadish you said that the confirmation must be done using PO accounting details not the user attributes. Then i think i have a problem in my system.
regards,
yannick.

Having trouble moving mail messages from one user to another

I am trying to move mail messages from one user to another on my Macbook, and I cannot seem to do it. I've tried archive, but I don't think I'm doing it right. Any suggestions?
Thanks,
Noreen
Message was edited by: reensjp

I had to go to the Mac store to get the answer to this one... i was archiving correctly, but you need to save the mbox files to your desktop, then move them to the shared folder, that way all users have access. I also had to edit the permissions on the files, as the user i wanted to have the emails didn't have permission to even look at the files.
Noreen

How can I move my iPad's iTunes backup from one user to another?

Is it possible to move my iPad's iTunes backup from one user to another, so as to change which user the iPad is syncing to without deleting any app data? Currently the iPad is synced to one user on my iMac, and I would like to transfer it so that it will sync with a different user on the same iMac (using iTunes, of course). I'd like to replace content from the old user's iTunes library with my user (eg. music, movies), but I don't want to loose app data in the process if I can avoid it.
I have tried to use the pathway /Library/Application Support/MobileSync/Backup but my iMac doesn't seem to have a MoblieSync folder. I wouldn't know what to do with the backup anyway though.
Can anyone help me or is this request too complicated, difficult, or impossible? Thanks for your help!

The Apple Document covers this. See the footnotes of my google docs
I've done this, it is easy, but takes time and patience.
On the existing mac with OSX and Configurator:
========================================
- run disk utility and verify your disks are ok, a must
- make note of the user logged in when using configurator such as "bob"
- connect a new or newly reformatted USB formatted for Apple
- run time machine and backup to the USB
- Take the mac off the network,
- Buy a new mac
- setup the mac with a new logon account like Paul or "bob2" do not use BOB !!
- finish the new purchase setup, get to your desktop
- now run the migraiton assistant moving bob from the USB to the new mac
- reboot, logon as bob, launch configurator and connect just one ipad. Test
https://docs.google.com/document/d/1SMBgyzONxcx6_FswgkW9XYLpA4oCt_2y1uw9ceMZ9F4/ edit?usp=sharing

Moving a folder to another partition

I moved a user's INBOX from one partition to another. Everything went well, except that the Sent folder was unintentionally left on the source partition. I performed this command to move the folder to the destination partition:
mboxutil -r user/<username>/Sent user/<username>/Sent new-partition
It got hung up every time during the process.
What can do I to move the folder back to its new partition?

Thank you for your prompt response. My problems aren't solved however. I am dealing directly with a production server and I have no direct authority to restart the server, as you suggested in your previous replies. The only thing I can do is kill the occassional 'mboxutil' jobs that I attempt to run.
What I have noticed now is that any commands I attempt to run against that one problematic user/<userid> do not work. For example,
I tried, mboxutil -c user/<userid>/test --- to create a test folder and that freezes too.
If restarting doesn't fix the hanging issue, then you can simply copy the contents of the old Sent directory to the new one, remove the old one, and runI tried, mboxutil -d user/<userid>/Sent (to remove the old folder, as you suggested) and that doesn't work because again it freezes.
When I tried to run similar commands on another test account, they all work very smoothly. Now I'm concerned that this particular user's mailbox may have gotten locked somehow. My question is, has that ever happened before and if the answer is yes, what can I do to remedy this issue without having to restart the messagin server.
Thanks in advance for your help.

How can I migrate from one user to another within the same computer?

My main user account in my desktop is becoming buggy after to many migrations from different computers and long time usage. I would like to migrate from one user to another user within the same computer to see if this improves my current problems.
How can I do it in a reasonably safe and quick way?
Thank you very much, cheers, Rui
iMAC, OS 10.6.8... and yes, I love Snow Leopard light and handy... and all my programs work on it...

Move small groups of files to the /Users/Shared/ folder or another location and see if the problems disappear. Moving everything to a new user account will in all probability transfer the problems.
(119885)

I moved my users/yourname folder my other drive and want to move it back

Hi there.
I recently swapped out the internal hard drive for an SSD and I swapped the optical drive for another HDD.
I use the SSD as a system drive that I don't write to.
The HDD is for audio and documents.
I moved my users/yourname to the HDD including the library folder but it's been strongly recommended that I move the users folder back to the system drive and move the iTunes, iPhoto, docs,and desktop folders to the HDD. Do I just simply copy the folder back over to the SSD and delete the folders on the HDD? do I need to do anything in the terminal?
thanks for your help.
-Matt

You could point your home folder to the new destination so the system recognizes it as such, and not touch anything. See below
Changing user account short name

Question for Kappy: Best guide for moving a user to a new Mac?

Really anyone could answer, but Kappy, you gave me such a great, detailed step-by-step guide on migrating to a new drive ( My 3rd Party SSD won't mount ) that I use it religiously. I wanted to ask you if you could point to the best process for moving a user from one Mac to another, the absolute best way. I typically use this website:
http://pondini.org/OSX/Setup.html
But I thought I'd ask for your sage wisdom first.
Thanks for reading!

Lord Zero wrote:
Thanks Baby Boomer. I will probably stick with the pondini site, then, being that a 3rd party is more likely to discuss the warts in the process.
Pondini (RIP) was a valuable contributor in the Community. Thankfully, his websites live on!!!

Disabling user through API call -process task-followed by an Enable User...

Hi,
I am running on OIM 9.1 BP11. I implemented a process task to disable the user based on a URS form field change.
I can confirm from the log file and the resource that the Disable user (xellerate user) happened. But the user got enabled back right away. The log file showed that a scheduled task named "Enable User After Start Date" ran and enable the user. So, I disabled that scheduled task.
Then I repeated the test again. I observed the same behavior of user being disabled and enabled again but this time, OIM called an adapter. This is what I observed in the log file:
20988 INFO,20 Oct 2010 12:21:56,519,[XELLERATE.DATABASE],DB read: select evt.ev t_key, evt.evt_name, evt.evt_package, mil.mil_name from mil mil, evt evt w here evt.evt_key = mil.evt_key and mil.mil_key=10
20989 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.DATABASE],select evt.evt_key, ev t.evt_name, evt.evt_package, mil.mil_name from mil mil, evt evt where evt. evt_key = mil.evt_key and mil.mil_key=10
20990 INFO,20 Oct 2010 12:21:56,519,[XELLERATE.PERFORMANCE],Query: DB: 0, LOAD: 0, TOTAL: 0
20991 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.SERVER],Class/Method: tcBusiness Obj/getSqlOperationFromMembers entered.
20992 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.SERVER],Class/Method: tcBusiness Obj/getSqlOperationFromMembers left.
20993 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.ADAPTERS],Class/Method: tcADPCla ssLoader/getClassLoader entered.
20994 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.ADAPTERS],Class/Method: tcADPCla ssLoader/getClassLoader left.
20995 DEBUG,20 Oct 2010 12:21:56,520,[XELLERATE.ADAPTERS],Class/Method: tcADPCla ssLoader/findClass entered.
20996 INFO,20 Oct 2010 12:21:56,530,[XELLERATE.ADAPTERS],Adapter: Enabling the User was initiated for the task: Enable User.
20997 INFO,20 Oct 2010 12:21:56,531,[XELLERATE.JAVACLIENT],System Event Handler : Enabling the User
I did exactly the same disabling user process at another client and it worked fine. I don't understand what causes OIM to call this system Event handler to re-enable the user.
Please help.
Thanks
Khanh

Do you have any Entity Adapter or Event Handler or Trigger which enables user for some condition ?
Check your environment. If you have please remove that and try.
Does this user has and provisioned resource ? If yes, try for some other user which doesn't have resource provisioned.

Trouble moving AD User with Move-ADObject

When trying to move and AD User using the following command:
move-adobject 'CN=John Doe,OU=_Users,OU=ABC,DC=xyz,DC=com' -targetpath 'OU=Disabled Accounts,OU=_Users,OU=ABC,DC=xyz,DC=com' -targetserver someDC.xyz.com
I'm receiving an error:
Move-ADObject : Source and destination for the cross-domain move operation are identical. Caller should use local move operation instead of cross-domain move operation.
The Object and it's target both reside in the same domain. In fact there is only one domain. Is there some "local move" operation I should be using instead?

I've actually tried both the combination of several different OU's and several different users, making sure to remove all the group memberships from the user also. Still seem to be generating the same error =/
Edit: Perhaps something is set on the OU to prevent mass movement of objects? Sort of like accidental deletion?
AFAIK, the accidental deletion flag will only stop you from moving the OU itself, not moving a user into it.
Okay, some other ideas (you've probably tried all of these though..):
1 - Try with a different account.
2 - Try from a different PC.
3 - Try running directly on a DC (and try using the -Server parameter to force that DC to be used if it continues to fail).
4 - If you're running an older version of PowerShell, try updating.
I wish I could be of more help, but I just can't replicate this error no matter what I try.
Don't retire TechNet! -
(Don't give up yet - 12,700+ strong and growing)

Essbase Error 1013009 - Administrator Has Temporarily Disabled User Command

Hi guys,
I'm trying to load an outline from one server to another server. But during the restructuring process, I encountered the error "Essbase Error 1013009 - Administrator Has Temporarily Disabled User Commands". What does this error mean?
How can I possibly resolve this error? I'm also researching on this error right now.
Your reply is greatly appreciated.
By the way I'm using Essbase 6.5
Cheers!

So what do you see in the application log? Essbase.log?
Are other databases locked as well?
But during the restructuring process,^^^ I'm a little confused by this -- what restructure? If I copy a .otl file from server A to server B, Essbase has to save onto server B, but there isn't a restructure, I think, unless the act of saving forces that?
Regards,
Cameron Lackpour

1013009 - Administrator Has Temporarily Disabled User Commands

I feel lucky. I got one quirky problem answered today so here is another.
I have a large report running on 11.1.1.3 Essbase. The os is 64 bit linux. Occasionally we get the following messages:
ERROR - 1013009 - Administrator Has Temporarily Disabled User Commands.
ERROR - 1241101 - Unexpected Essbase error 1013009.
there is no xcp generated.
To make sure that the application is not in archive mode or that user commands are disabled, I've bookended the report with GETAPPSTATE. When the report fails, the subsequent GETAPPSTATE reports that the app is accepting commands.
This same report has run successfully in 9.3.1 for months.
Has anyone else seen this?
Regards,
Dave

Sabrina,
I'm not ruling anything out at the moment. My suspicion is that it is related to some user action. I think that my next step is to seach the app & br logs near the failed event.
Dave

Moving disabled user to another OU

Similar Messages

Maybe you are looking for