OIM10g - Resource account last disabled datetime?

Hi All,
Please help me to find the exact disabled datetime through SQL query for any resource accounts. I've a requirement to revoke these accounts after configured number of days (30days) to current date through a custom scheduler.
Thanks,
VR
Edited by: 907571 on Feb 10, 2013 11:06 PM

Thru backend update its possible:
UPDATE [pub].[MSP_RESOURCES]
SET
RES_TYPE
= 101
WHERE
RES_NAME
= 'Resource Name'
Hope this will help you
Raushan Kumar |LinkedIn

Similar Messages

  • Disable resource account via Workflow

    Hello I created a transition in the Update User workflow to disable a resource account if a field is indicated in the admin tabbed user form.
    This activity works but all resource accounts (email, AD) are being disabled. Only email needs to be disabled. How do I get the 'services' value to take effect?
    <Activity id='9' name='DisableAccountAccess'>
            <Action id='0' application='com.waveset.session.WorkflowServices'>
              <Argument name='op' value='disableUser'/>
              <Argument name='accountId' value='$(user.waveset.accountId)'/>
              <Argument name='doWaveset' value='false'/>
              <Argument name='services'>
                <list>
                  <s>emailResource</s>
                </list>
              </Argument>
            </Action>
            <Transition to='Notify'/>
          </Activity>also tried below code but have been unable to get it to work.
    <Activity id='9' name='DisableAccountAccess'>
            <Action id='0' application='com.waveset.session.WorkflowServices'>
              <Argument name='op' value='checkoutView'/>
              <Argument name='type' value='disable'/>
              <Argument name='id' value='$(user.waveset.accountId)'/>
              <Argument name='authorized' value='true'/>
              <Return from='WF_ACTION_ERROR' to='error'/>
              <Return from='view' to='disableAccView'/>
            </Action>
            <Action id='1'>
              <expression>
                <block>
                  <set name='disableAccView.resourceAccounts.currentResourceAccounts[emailResource].disabled'>
                    <Boolean>true</Boolean>
                  </set>
                  <set name='disableAccView.accounts[emailResource].disabled'>
                    <Boolean>true</Boolean>
                  </set>
                </block>
              </expression>
            </Action>
            <Action id='2' application='com.waveset.session.WorkflowServices'>
              <Argument name='op' value='checkinView'/>
              <Argument name='view' value='$(disableAccView)'/>
              <Argument name='authorized' value='true'/>
            </Action>
            <Transition to='Notify'/>
          </Activity>I would prefer to use the first method. Thank you in advance for your help

    After having a chance to actually look at the documentation I figured I'd add one more thing for those who happen to stumble across this in a search later. You are, of course, right. The services argument is what you need for disable user.
    For others reading this I should correct my previous posting. The "TargetResources" setting tends to be more of a form property rather than a workflow argument although it can be used with the checkoutView and checkinView workflow services. It is recommended by Sun, in the performance tuning guide, to keep views as small as necessary in order to speed things up.

  • Disabling a resource account through workflow

    Hi All,
    How to disable a resource account through a workflow?

    Something like this in your workflow
              <Field name='waveset.disabled'>
                <Expansion>
                  <s>true</s>
                </Expansion>
              </Field>
              <FieldLoop for='name' in='waveset.accounts[*].name'>
                <Field name='accounts[$(name)].disable'>
                  <Expansion>
                    <s>true</s>
                  </Expansion>
                </Field>
                <Field name='TraceExecution'>
                  <Expansion>
                    <block trace='true'>
                      <invoke name='println'>
                        <ref>java.System.out</ref>
                        <concat>
                          <s>ActSyncUserForm Processing Disable For: </s>
                          <ref>name</ref>
                        </concat>
                      </invoke>
                    </block>
                  </Expansion>
                </Field>
                <Field name='update.accounts[$(name)].disable'>
                  <Expansion>
                    <s>true</s>
                  </Expansion>
                </Field>
              </Field>

  • HT1911 Why does Itunes have me logging in multiple times to buy a song? Somehow, my account got disabled now. It also shows that I am logged in....?

    Why does itunes have me logging in multiple times to buy a song? I can access everything else fine, but now my account is disabled for some reason although my password was entered correctly... help

    I've seen a couple of other threads over the last 10 minutes posting similar problems, so it appears to have affected other people as well - the poster on the first thread has now posted again saying that it's now working for him, so you could give it another try.
    Edit : your reply appeared as I was attempting to post this

  • How to find out if a user has no more resource accounts?

    I want to check to see if a user has no more resource accounts tied to it. The only resource account left is Lighthouse and nothing else.
    Do you know how I do this?
    Thanks

    I was able to find disabled users using the below code. Does anyone know how I can find users who have only Lighthouse account and nothing else? I want to add this to the search criteria.
    <Action id='0' application='com.waveset.session.WorkflowServices'>
    <Argument name='op' value='queryObjectNames'/>
    <Argument name='type' value='User'/>
    <Argument name='single' value='false'/>
    <Argument name='attributes'>
    <map>
    <s>lhdis</s>
    <s>true</s>
    </map>
    </Argument>
    </Action>

  • My iTunes account was disabled:  epic fail Apple!

    So, here's my story.  Last night, I was suddenly aware that I couldn't update apps on my iPhone (4S, up to date), or load new ones.  Tried everything, nothing helped.  iPad seemed fine.  Restored, restarted, resetting as new phone, nothing worked.  I went to my local genius bar and spend THREE HOURS with them, where they tried everything as well, resotring, resetting, even swapping the phone, nothing helped.  They suggested I contact apple for more help, I completely stumped the entire genius team at this store. Calling apple store support on my way home in a huff, the nice woman on the other line suggested that my account might be disabled.  So, upon returning home, I looked up "disabled itunes account" and noticed that to fix this, all one needed to do is change your itunes password.  When I did that, everything was fine again.  Apps loaded fine, existing apps updated fine as well.
    I consider this an epic fail on Apple's part.  Mind you, I love the iPhone, have had every model, and would never get another phone.  Nevertheless, why was my account disabled?  Why is there no phone number to call itunes support?  I have to email and wait for them to call back?  Why wasn't I sent a message saying that my account was disabled becuase of a potential security breach?  My account is in good standing, I barely purchase anything to be honest.  The odd small app or two, but that's it.  All was valid and in good standing.  Why would the geniuses not think to say "maybe it's your itunes account, let's change the password and see what happened."  I consider this a collasal failure, making me waste an entire evening, only for it to be a quick fix.
    Has anyone else experienced this? 
    Thanks for the feedback!
    D

    why was my account disabled?
    Usually it is because of multiple incorrect password entry attempts. Since resetting the password fixed the problem, this would seem to be likely. I can't say with certainty, though.
    Why is there no phone number to call itunes support?
    Because Apple does not provide telephone support for the iTunes Store,
    Why wasn't I sent a message saying that my account was disabled becuase of a potential security breach?
    No idea. E-mails are I believe usual in at least some such cases, but whether one would be generated in this specific instance (and perhaps was blocked by a spam filter) I can't say.
    Why would the geniuses not think to say "maybe it's your itunes account, let's change the password and see what happened."
    Again, no firm idea, but the Geniuses aren't expected to provide support for the iTunes Store, so it probably hasn't arisen in exactly that way before and hence just didn't occur to them in absence of any evidence or notification that the account was disabled.
    You can comment to Apple in the matter via their feedback page, if you wish:
    http://www.apple.com/feedback/itunesapp.html
    Regards.

  • Turn "Delete Resource Account" for Active Directory into rename/move/unlink

    My Windows sysad would like me to stop deleting Active Directory users; he's tired of cleaning up from dangling SIDs, and I don't particularly blame him. Instead, he would like the process of "deleting" an AD account to be more like:
    1. disable
    2. rename from cn=user to cn=user_999, where 999 is replaced with an incrementing number (jsmith_001, jsmith_002, etc.). (Or maybe he;d be Ok with jsmith_yyyymmddhhmmss...)
    3. move (probably in the same "rename" above) from ou=Employees to ou=4Delete.
    4. unlink account from user.
    We are assigning AD accounts through roles, and so the Delete Resource User (or Delete Resource Person?) task is invoked. Does anyone have a customized version of this task that differentiates between resource account types and handles the "disable/rename/move/unlink" AD account paradigm my sysad would like? -Les

    Hi,
    did you ever resolve this? If so, how did you work it out as we would like to do the same.
    Thanks.

  • After updating to ios8, i tried to log into my instagram on my iphone 5c and it says my account is disabled when i never disabled it

    ive tried to delete the instagram app multiple times and it still wont let me log in. also, i have had my friends log into my account, and they are able to log into my account. i have heard of other people that are also having the same problem.

    Hi Wendy
    I to had the same problem when my account was disabled after my fiancé used my phone.
    As I was being advised to contact apple support, being new to even itunes on my own account i checked in with them, and every thing I was being advised to do still disabled.
    I was obsessing over this and was trawlling through guides etc just incase I had missed something.
    As it turns out I had but no one had suggested it!
    The morning I was going to go and let my frustration out on a member of the apple store I had one last look. Went into the account settings and realised my name was right address right account details were not. I changed these and now my app store has become my obsession. I could finally feel the same way about my iPhone as my friends did and still do about theirs.
    Sorry it was long winded but I truely was getting annoyed and out played by my iPhone.
    I do hope this helps you and your daughter.

  • Prevent Resource Accounts been Deleted from a Particular Resource

    Hi Everybody,
    We have a situation where we want to prevent resource accounts been deleted from a particular resource when the user is deleted from IAM. All other accounts to other resources can be deleted as normal.
    We are currently using version 5. Has anyone got any ideas on how to do this?
    I tried modifying the target list in the Delete Users workflow but had no success so far.
    Thanking you in advanced.

    In rev.6 we did that simply by disabling Delete action on the resource definition.

  • LastLogon updated after account in disabled/expired status

    I have an account that was disabled and expired on 1/2/2015 but the attribute lastlogon date was read as 1/7/2015
    I don't have the lastlogontimestamp as the account already was deleted
    Is it possible for the lastlogon attribute to be updated while the account is in disabled status?

    Lastlogon is updated when an authentication was performed against a DC. This attribute does not get replicated as each DC keeps it own value.
    You can get the exact last logon date and time using my script here: https://gallery.technet.microsoft.com/scriptcenter/Get-Active-Directory-User-bbcdd771
    It is not possible that an account authenticate against a DC when it is disabled or expired. I believe that the account was disabled or set to be expired by an administrator after he did his last authentication, If auditing is enabled and events were not
    purged then you can try to track recent changes on the account. However, if you would like to have a better view of what is happening in your AD, you will need to have a third part tool to monitor changes. The one I usually recommend is Lepide Auditor Suite
    - Active Directory: http://www.lepide.com/lepideauditor/active-directory.html
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • I receive message "you cannot buy because your account is disable"

    I have a promblem when I updated or load APP. in App Store.
    System will show message " You cannot buy because your
    account is disable ". This problem show in last 2 days .
    Best regard
    Aryuratas C

    drsoram wrote:
    I just got a new IPAD. I am on Windows 7
    I have an itunes account for my Ipod Touch and can download and buy apps with no problem.
    However on my new IPAD, when I try to buy and app I get an error message that says " You cannot buy because your account it disabled"?
    What does that mean and why is my account disable on the new IPAD but works fine on my Ipod Touch?
    thank you
    Just make sure you've put in the right email address and password. If you have, then contact Apple. I'm sure they'll help you straight away.

  • My old email account was disabled and I can't remember my password - how can I reset my password or move $ to a new itunes/email account?  It seems I must have mis-typed my information because I can't answer the security questions correctly...

    My old email account is disabled and I can't remember my itunes password - how can I reset my password or move $ to a new itunes/email account?  It seems I must have mis-typed my account information because I can't answer the security questions correctly...

    ➡ https://iforgot.apple.com/

  • How, can I fix my icloud account  !! It keeps saying that my account is InValid/account is disabled ? How can  I Inabled my account ?

    My Apple ID password for icloud / I have reset it and still my Account is Disabled ?
    MY icloud account for iTunes App Store ,keeps saying my account is invalid / disabled to contact " Customer Service" in the iTunes store?
    How do I fix this ? I've reset my iPad truned icloud App Store off or sign out of apple then signed back in with my new ID or Password!

    Goonercole wrote:
    Ok if my iTunes account is disabled how do I get it enabled please
    I told you in the first post:
    "If changing your password does not work, then contact itunes support."

  • HT203433 I downloaded apps with one appleid on my iphone.  When my account was disabled I set up a new appleid & account.  Now I cannot update apps on my iphone that were downloaded with original appleid when I login with my new apple id.  What do I need

    I downloaded apps with one appleid on my iphone.  When my account was disabled I set up a new appleid & account.  Now I cannot update apps on my iphone that were downloaded with original appleid when I login with my new apple id.  What do I need to do?

    You can write into support and ask for help reenabling the account through this link here:
    http://www.apple.com/support/itunes/contact/
    Since the applications were purchased on the older account, you will need to log into that account to update them. The newer account will not recognize the purchases because they are not a part of the purchase history for the specific account.

  • When i Log into instagram it say my account  is disable but when i log in on another iphone my instagram account log's in. when i try logging into another account it continue to say disable. Why cant i log into instagram or make another one on my iphone?

    When i Log into instagram it say my account  is disable but when i log in on another iphone my instagram account log's in. When i try logging into another account on my phone it continue to say disable. i also tried to make a new instagram on my phone but it wont let me. i deleted the app over and over again but it still wont let me log into any instagram account. Why cant i log into instagram or make another one on my iphone?
    Is is=t possable to have your phone banned from a app forever???
    HELP !!

    I just asked the same thing and did some research. Some people have said  that the UDID code is like banned from instagram, but your account isn't. I'm able to use it on my phone but not on my iPod.

Maybe you are looking for