PSFT User profiles getting revoked

Hi,
We used to have the revoke turned ON in our access policies.
But recently, we removed that and upgrade to 9102 BP14. I still notice that the PS user profiles are getting revoked when a OIM user is terminated.
However, users who are created after the access policy change are getting disabled as expected.
I also ran the PurgeCache script after the patch upgrade
Please help
M

- You mean with OIM BP14 you have turned off the Revoke if no Longer applies feature of the Access Policy --- correct
- What do you mean by OIM User is terminated ?? --- when a OIM user is disabled from a PSFT ER recon termination
- users who are created after the AP change are getting disabled as expected, so it means even though the user was removed from the access policy group which had initially provisioned the PSFT account, the account is just disabled and not revoked ---- correct, the PSFT UM user profiles are getting disabled
- but for users who are already in the groups prior to this change, if they are terminated from PSFT and lose their group membership, the PSFT user profiles are still getting revoked.
We want the PSFT user profiles to just be disabled

Similar Messages

  • User Profile getting deleted

    What happens when a user profile gets deleted? Does it prevent that user from accessing the sharepoint site or any site he has access to?
    One of our users have been moved from one OU to the other and manager got an email about his mysite getting deleted within 14days. I don't care if his mysite gets deleted until he has access to the main site.

    No, User Profiles do not impact permissions.
    Trevor Seward
    Follow or contact me at...
    &nbsp&nbsp
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • Service accounts are getting revoked when user/account gets revoked

    Hi,
    Service accounts are getting revoked in oim 11g while revoking the associated user or even revoking the account at resource level which should not happen as mentioned in developers guide.
    It is cancelling all the provisioning tasks. Please let me know what should i need to check for this?

    Kevin,
    I used the changeToServiceAccount API method to change the account type to service. It updates the IsServiceAccount flag as Yes in the UI. But in DB, its showing null value for "UD_ADUSER_SERVICEACCOUNT".
    But i could able to handle the moveServiceAccount API to move it to another user too.
    Please let me know why the value in DB is not getting updated for "UD_ADUSER_SERVICEACCOUNT".
    Is this the attribute to be checked at dblevel or do you mentioned something else?

  • Why user profile gets corrupted or misbehaved?

    Hi,
    EBS = 12.0.6, OS= AIX, Single node installation. During last 6 months, some of the users who were using 'FINANCE' modules were complaining about their access.Though they can reach upto the required form, tried to do search response is very slow or sometimes no response. When i created another user with same responsibity and tried to do the same action, it is ok. As a immediate solution, had to disable (end dated) the old user profile and given the new profile. How to diagnoise & resolve such problems? May be it a bug, etc?
    Regards
    Ariz

    Hi,
    During last 6 months, some of the users who were using 'FINANCE' modules were complaining about their access.Though they can reach upto the required form, tried to do search response is very slow or sometimes no response. Could you please elaborate more about this?
    Did you verify if the debug is enabled at the user level for those users?
    When i created another user with same responsibity and tried to do the same action, it is ok. Enable trace on the old users and generate the TKPROF file, this should help in finding out why it takes long time to process their requests.
    As a immediate solution, had to disable (end dated) the old user profile and given the new profile. What profile you are referring to?
    How to diagnoise & resolve such problems? May be it a bug, etc?Could be though I have not seen any similar issues on MOS website. Did you try to log a SR and confirm this with Oracle support?
    Regards,
    Hussein

  • User profiles getting changed to "local"

    We have users who have had a user policy with DLU active via their OU for years. The policy also specifies that their roaming profile is being stored in their home directory, which it is.
    Due to system changes we needed to change the OU policy to a No-DLU one and then associate the DLU policy to individuals. We changed the search policy to look at Object before Container.
    Now we are getting reports of users whose local workstation profile has gotten changed from Roaming to Local and the Roaming radio button is grayed out so we can't even change it back.
    Ideas on how this happened and how to fix it?

    zeffan,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Visit http://support.novell.com and search the knowledgebase and/or check all
    the other self support options and support programs available.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.novell.com)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.novell.com/faq.php
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://support.novell.com/forums/

  • The User Profile Service service failed to Login user Profile error in Windows 7 Home Premium

    Hi,
    I recently purchased a new Dell Inspirion 1564 Laptop which had Microsoft Windows 7 Home Premium 64-bit installed.
    The hardware configuration is i5 core Processor, 4GB Ram , 320GB HDD and 512MB Graphics card.
    Today morning, I couldn't login as the system returned the following error after I entered the password.
    "The User Profile Service service failed to login.
    User Profile cannot be loaded"
    I couldn't login at all as i had not created any other user account, even the face recognition didn't work.
    I had to restore my pc to the previous state. I believe this happened after the installation of Windows Malicious Software Removal Tool x64 - March 2010 (KB890830) update, not immeditately though as i used the system few times after the installation of this update.
    Is this a bug? I cant imagine if this happens if I am about to give a presentation, its going to be disastrous!
    Any help is appreciated
    Avinash

    I'm getting the same issue - I'm the IT Manager at a school where every student has a laptop (fujitsu tablet T4410). This occurs to at least one new student every day. I have been unable to re-create the issue on demand, although I suspect it occurs when a temporary user profile gets created after the logon process takes too long (due to some disk activity, possibly related to windows updates or some thing). When we were creating student accounts on the machines, this would occur if we attempted to log in the newly created account before the computer had 'settled down' - it seems that there is a logon timeout, after which something stops working. If the new user's first logon happened too soon after booting, the profile would be corrupted. But this doesn't quite explain why it occurs seemingly randomly now.
    My current solution is to boot into safe mode, back up the user's files, delete the account, create it again (the other suggested solutions on the internet did not work)
    If you're desperate, you can log in while in safe mode, and use that to create a new account.
    In any case, this is proving a very bad experience of Windows 7 for my students, and I hope to see a more useful fix for this soon.

  • User Profiles being created and not using existing

    I have a Windows Embedded 8 thin client.  It will create a user profile when a user logs on and if they log off and log back on it will use the same created profile.  However if we restart the thin client and go to log on it will create a completely
    new profile for the user. It does this every single time it is restarted and a user logs on.  So under the users folder it will have several copies of profiles for that user adding something to it each time.  Example: Username, Username.Domain, Username.Domain.000,
    Username.Domain.001 We have turned off the netXclean to keep it from removing the user profile at logoff.  I have added the C:\Users folder to the write filter exclusion list to make sure it is allowed to write to that location.  What would cause
    it to not use the exisiting user profile for a user and recreate one only after a restart?  It is a soft restart/shutdown we aren't hard powering off as I could see the user profile getting corrupted if that were to happen.
    Luke

    Hi,
    It seems like your account log as temporary profile. Please navigate to the registry below and delete the effected profile's subfolder for test.
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
    Here is another thread that have multiple talking about Temporary profile, maybe helpful with your problem.
    http://social.technet.microsoft.com/Forums/windows/en-US/5ec0b949-effa-4e30-ba09-dc948a4c7a8b/windows-7-starting-with-a-temporary-profile
    Roger Lu
    TechNet Community Support

  • User profile sync Sharepoint 2010 photos thumbnail with AD and Lync 2010 - error on Full Synchronization- get events 8311, 6110, 6803 FIMSynchronization Service

    User profile sync Sharepoint 2010 photos thumbnail with AD and Lync 2010 - error on Full Synchronization- get events 8311, 6110, 6803 FIMSynchronization Service
    We're trying to set up sync between Sharepoint and AD so photos are displayed in Lync.
    The certificate referenced in 8311 is not the sharepoint root cert, its the UCC cert with our FQDN of the site. sharepoint.domain.com
    Is this causing the problem with the sync and holding up the photos?
    I have tried several proposed fixes, it hasn't helped.
    tried this as well:
    http://blogs.technet.com/b/praveenh/archive/2011/05/11/event-id-8311-certificate-validation-errors-in-mss-2010.aspx
    Josh

    Try this fix and see if its sync the photos:
    http://blogs.technet.com/b/steve_chen/archive/2010/09/20/user-profile-sync-sharepoint-2010.aspx#Profile Picture Property
    http://blogs.technet.com/b/steve_chen/archive/2010/09/20/user-profile-sync-sharepoint-2010.aspx#SyncPicAD2SPS
    Update-SPProfilePhotoStore -CreateThumbnailsForImportedPhotos 1 -MySiteHostLocation <mySiteHostURL>
    Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

  • How to Get user profile properties in provider -cloud hosted app in sharepoint online - office 365 using REST API?

    How to Get user profile properties in provider -cloud hosted app in sharepoint online - office 365 using REST API?
    any idea?

    Hi,
    From your description, my understanding is that you want to get user profile properties in provider-hosted app in SharePoint online using REST API.
    Here is sample code for getting user profile properties:
    http://www.vrdmn.com/2013/07/sharepoint-2013-get-userprofile.html
    Here is a blog below about accessing data from the provider-host apps:
    http://dannyjessee.com/blog/index.php/2014/07/accessing-sharepoint-data-from-provider-hosted-apps-use-the-right-context/
    Best Regards,
    Vincent Han
    TechNet Community Support
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
    [email protected]

  • How to get user profiles and tasklists in axf

    Hi,
    We have configured the the views in the BPM Worklist ,restart all the managed servers like SOA Server,IPM Server and UCM Server.
    After that navigate to url-http://ipm:16000/imaging/faces/Driver.jspx to configure command driver input parameter settings-like SolutionNamespace     
    CommandNamespace     and provide the username.
    After clicking on Execute request it generates the conversation id but when we clicked on Execute Response button the AXF Task lists and user profile fields are empty.
    can anybody suggest the way to get user profiles and axf tasklist?
    Snehal

    Assign proper groups and/or users to BPM view created.
    In IPM login and logout for that user. It will start appearing.
    Regards,
    Vikrant Korde

  • To get plant field in my selection screen based on user profile maintained

    Hi All,
    I have plant (WERKS) field in my selection screen. Now I need to get the plant value maintained in the user profile for that user. So how to get the plant value based on the user profile.
    Please let me know if anyone having idea on this. I will reward to you with the valid points.
    Regards
    raghu.

    Hi Raghu,
    I have searched and found this information, check it may help you
    Check the SY-UNAME with the the name of the Plant
    User Plant user data take it from T001W table
    and All logon User data will be in USR02 table
    take the data from corresponding tables and check.
    If you are working in SRM
    Use FM BBP_READ_ATTRIBUTES to get the User plant after passing the User ID to the FM.
    in SUIM go to Users by Complex Selection criterion.
    In that there would be the Authorization Object..select an object which has the value plant in it and enter the value inthat....
    Also u can enter WERKS value as 1120 in the object field and get the list,
    Regards,
    Satish

  • User Profile Services:How get to know how many user are using my site.

    Hi,
    User Profile Services:How get to know how many user are using my site.
    Recently i have done migration sharepoint 2010 to sharepoint 2013,I did not migrate USer profile services because less user are using user profile here,but i need to know how many few uer are using my site for data store.
    Is any why we can get to know  user name who are using my site document library and other things.
    Hasan Jamal Siddiqui(MCTS,MCPD,ITIL@V3),Sharepoint and EPM Consultant,TCS
    |
    | Twitter

    Fallowing command shows only count of my site user ,I need to know how many upload data on my site
    Hasan Jamal Siddiqui(MCTS,MCPD,ITIL@V3),Sharepoint and EPM Consultant,TCS
    |
    | Twitter

  • Can't Log Any Users Onto My Domain Except the Administrator Getting The Following Error "The user profile service failed the logon"

    Hi All,
    I am currently completing a project for college which involves the creation of a domain, OU's, GPO's etc within a virtual environment.
    I am using Windows Server 2008 Enterprise running this on VMware however after having completed and tested all my GPO's now none of my users are able to log on to the domain and keep getting the following error message "The user profile service failed
    the logon" "User profile cannot be loaded".
    I have tried to a lot of different options prior to posting which include:
    Creating a new user account/s in case the previous user policies were corrupt the same error message is shown.
    I also configured my DC to allow users to log onto the DC in case this was a network issue but the same error still exists.
    My Administrator account always logs onto the DC without fail and applies all the GPO's as it should.
    I have rebuilt my servers twice now at this stage and the same problems keep happening at first it was just confined to users within a single OU but now is Domain wide any suggestions on what I can do.
    Thanks,
    John

    John,
    Since this is a project, you may have experimented with various settings in multiple Group Policies, so I would recommend you run the Group Policy Modelling Wizard, as it will show you all the GP settings down to a specific user on a specific computer, plus
    tell you which Group Policy sets and which settings, and thereby perhaps find where the problem occurs.
    Please mark as answer or vote
    as helpful when
    it applies. Thanks!

  • How to fix Workflow failed to get user profile for user:

    hi All,
    How to fix Workflow failed to get user profile for user when using Lookup function in sharepoint designer?

    Try to use “As string” instead of “Login Name” for the “Return field as”.
    Regards,
    Jayant
    jayant prabhakar

  • Query to get the user profile

    Hello
    I would like to know the query to get the complete user profile, for example the user password, all the privileges it has, etc
    Thank you

    Go to tahiti.oracle.com
    Drill down to your selected product and version
    There, find the complete documentation set
    There, find the find Reference Manual
    There, find a complete description of all the data dictionary view.
    Browse through the names of those view for something that looks like a likely candidate (thing with "user" or "priv" in the name)
    Edited by: EdStevens on Oct 23, 2009 8:20 PM

Maybe you are looking for

  • HT1277 How do you change the "picture" on your e-mail header?

    How do you change the little picture that is on your e-mail header? Pretty basic, but I have no idea.

  • IPhone 4 original video resized when sending MMS :-(

    Hello, I was just unhappily surprised upon finding out that the original HD video I shot of my baby was resized to a lower quality when I sent it via MMS. The lower quality video was later imported into iPhoto. Is there a way to prevent the automatic

  • Catalog SC turning to a PR instead of PO in ECC

    Hi All,     I am encountering a scenario where my catalog SCs are turning to RQ rather than PO in ECC. ours is a SRM 5.5, ECC 6.0 classic scenario. Our backend document creation determination is set to PO if requisition is complete else PR. We do not

  • Multiple Logins to Same Account?

    Is it possible to log onto the same account twice? I've been experimenting with utilities that provide multiple desktops, such as You Control Desktops. I like the idea, but the fact of being in the same account causes some problems. For instance, I s

  • Sales order exit - changing pricing conditions

    Hi Gurus     We have an issue where a customer was given $0 pricing on an item within their price list, but when an order is created, the system prices the item at List Price.   Upon investigation, it was discovered that SAP cannot maintain pricing a