Updating date while enabling/Disabling user in AD

Hi All,
We are using FIM 2010 R2 SP1 and integrated with AD.
All integration is done through synch rule and no coding.
Now we have a new requirement to update date in AD while enabling and disabling user.
Kindly suggest, how it can be achieved through synch rule.
Thanks,
Mann

Hi Mann.Cool,
You can't set a date dynamically thought sync rule. Instead, I suggest you parse useraccountcontrol and set an custom attribute with value enabled/disabled.
See
http://idmgnt.wordpress.com/xpath-custom-expression/ (Check if an account is enable or not)
Once is done:
Create two new sets "Enabled users" and "Disabled users"
Create a WF with T4F Function Evaluator, to set your date attribute (http://oxfordcomputergroup.com/technology/software-tools-components )
Create the mpr
Let me know if you want more details
Regards,
Sylvain

Similar Messages

Active Directory User which can Create a User but not Allowed to Enable Disabled Users

Hi Guys, we have a requirement to create a User Group in Active Directory which will grant its members permission to 'Create Users' but not be allowed to 'Enable' 'Disabled Users'.
We have tried delegating control and assigning permissions by going to 'Security Tab>Advanced'.
It seems like when a group is granted permission to create users, it will also be allowed to enable, disabled users.
Kindly advise if it is possible to create a user group with permissions to 'Create Users' but not be allowed to 'Enable', 'Disabled Users'.

Hi,
According to my experience, you can assign permission with create/delete user objects. If you want to disable/enbale
a user, you must be a member of the Account Operators group, Domain Admins group, or the Enterprise Admins group in Active Directory, or you must have been delegated the appropriate authority.
In general, if you just give a user group the permission to create user objects, it cannot disable or enable user accounts. Please make sure that the permission you assigned is correct and the
user group are not the member of Account Operators group, Domain Admins group, or the Enterprise Admins group in Active Directory.
Best regards,
Susie

Problem in GTC - Enable/Disable user task

Hi,
I am trying to enable a user for a GTC, but I encounter the following errors while doing so:
10/08/25 02:19:23 Running GENERICADAPTER
10/08/25 02:19:23 Target Class = com.thortech.xl.gc.runtime.GCAdapterLibrary
ERROR,25 Aug 2010 02:19:23,959,[OIMCP.DATC],Class/Method: DBProvisioningTransportProvider/sendData encounter some problems: The table PS_RSTR_FMSU_VW does not exist in the target database schema oimuser
com.thortech.xl.gc.exception.DBException: The table PS_RSTR_FMSU_VW does not exist in the target database schema oimuser
at com.thortech.xl.gc.impl.common.DBFacade.getType(Unknown Source)
at com.thortech.xl.gc.impl.common.DBFacade.getSchema(Unknown Source)
at com.thortech.xl.gc.impl.prov.DBProvisioningTransportProvider.getSchema(Unknown Source)
at com.thortech.xl.gc.impl.prov.DBProvisioningTransportProvider.sendData(Unknown Source)
at com.thortech.xl.gc.runtime.GCAdapterLibrary.executeFunctionality(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpFMSUSER_GTC.GENERICADAPTER(adpFMSUSER_GTC.java:125)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpFMSUSER_GTC.implementation(adpFMSUSER_GTC.java:70)
at com.thortech.xl.client.events.tcBaseEvent.run(Unknown Source)
Also, the user 'oimuser' has sufficient privileges for the view 'PS_RSTR_FMSU_VW'. The data in the view is accessible and can be read when logged-in as oimuser in SQL developer.
Please help me in resolving this issue.
Regards.

Since this is a view, the user does not have Write permissions.
Regards.

Error while Enabling a user in OIM

Hi,
I have a requirement where i need to disable and enable OIM users based on a UDF . If the UDF says Active user should be enabled and if it says "deleted" user should be disabled. I'm able to "Disable" a user present in "Active" state but not vice versa. My entity adapter is as follows
statusUpdate(String userKey,String Status){
          OIMConnectionManagerImpl oimConn = new OIMConnectionManagerImpl();
          tcUserOperationsIntf tcUser = oimConn.getUserAPI();
          tcResultSet tcres = null;
               HashMap map = new HashMap();
               map.put("Users.Key",userKey);
               tcres = tcUser.findUsers(map);
               String s1=tcres.getStringValue("Users.Status");
               if(Status.equalsIgnoreCase("Active") )
                    if(s1.equalsIgnoreCase("Disabled")){
                         tcUser.enableUser(Long.parseLong(userKey));
               if(Status.equalsIgnoreCase("Deleted") )
                    if(s1.equalsIgnoreCase("Active")){
                         tcUser.disableUser(Long.parseLong(userKey));
My error is as follows
[com.oim.util.OIMConnectionManagerImpl] Unable to create factory instance
java.lang.NullPointerException
Edited by: user10665408 on Jul 1, 2009 3:14 PM

I have done sm changes now:
Try this.
If some import is missing or some spelling mistakes are there just correct those. It's just for reference.
Put import for map also.
package com.Tst.oim;
import Thor.API.Operations.tcUserOperationsIntf;
import Thor.API.tcResultSet;
import Thor.API.tcUtilityFactory;
import com.thortech.xl.crypto.tcCryptoUtil;
import com.thortech.xl.crypto.tcSignatureMessage;
import com.thortech.xl.util.config.ConfigurationClient;
import java.util.Hashtable;
public class CreateFile {
tcUtilityFactory utilFactory = null;
tcSignatureMessage moSignature = null;
tcUserOperationsIntf moUserUtility = null;
tcResultSet userResultSet = null;
ConfigurationClient.ComplexSetting myConfig =
ConfigurationClient.getComplexSettingByPath("Discovery.CoreServer");
final Hashtable env = myConfig.getAllSettings();
public void Enable(String userid) {
try {
System.out.println("TRY");
moSignature = tcCryptoUtil.sign("xelsysadm", "PrivateKey");
utilFactory = new tcUtilityFactory(env, moSignature);
moUserUtility = (tcuserOperations)utilfactory.getutility("Thor.API.Operations.tcUserOperations");
Map a = new HashMap();
a.put("Users.User ID", userid);
tcResultSet userset = moUserUtility.findAllUsers(a);
long ukey = userset.getLongValue("Users.Key");
moUserUtility.enableuser(ukey);
} catch (Exception e) {
e.printStackTrace();
Edited by: Dost

Server2003, enable / disable user login via powershell

Hi all,
Newbie, in Africa for short time only and probably haven't done all the homework I should have.
Unix and OO background but just learning powershell.
I need to be able to enable / disable local user accounts on a local server in a school; no clusters, pretty much stand-alone. I presume if I can get the user object it has a member / method for enabling / disabling, but I don't understand how to get
the user object. In particular, I don't understand the two-character abbreviations used in front of params to queries.
If I bring up active directory users and computers, what I see is:
techna-school
Tech/na school
      Students
The users I want to enable/disable are members of the "Students" group above, and for RDP / security purposes are members of the "Learners" group. The server is not in any "official" (i.e. DNS recognized) domain, just gets
net access as a normal user via dialup and DHCP.
I'm guessing I need something kinda like the following to get at the user objects, but I haven't a clue what the "ou", "dc", or anything else needed are supposed to be as I don't have an MS server background.
$learners = [ADSI] "LDAP://ou=Learners,dc=techna-school"
Any help would be much appreciated.
Thanks,
Gary

From the sounds of it, you have domain accounts not local accounts. The difference is domain accounts can log onto any machine within your domain, whereas local accounts can only log onto the local machine they where created on. Since your users are using
thin clients, it is most liekly a domain account they are using.
For using AD cmdlets on Server 2003, you need some things in place, this article might help you
Thanks for the info and pointer.
I'm a little leery of going through that process as I don't have a test system to work on, but I appreciate the pointer; may delve into that later.
In the meantime, I've managed to get the user objects using Get-WmiObject, but an attempt to modify them via Set-WmiInstance fails:
    $learners = Get-WmiObject -query "Select Name,Disabled From Win32_UserAccount"
    foreach ($learner in $learners) {
    Set-WmiInstance -InputObject $learner -Argument @{Disabled=$True} -PutType UpdateOnly
Set-WmiInstance : Invalid Object
Seems pretty straight-forward so I suspect it is a simple error but I'm not seeing it.

How to display the updated data from db to user interface in sruts framewor

A beginner in this area, I have been able to read a record from a
MySQL database and populate in jsp form . Now, my goal is to
allow the user to edit the contents of the form and then update the
record in MySQL and then display the same in jsp. page
The scenario in detail
1)the data is fetched from db and displayed in non-editable format
2)Next button is clicked
3)Now in the same jsp page I view the same data from db in editable format
4)The user is allowed to change the information
5)Now update button is clicked
6)the records are updated in the db -Finished doing till this step
7)But the updated info in non - editable format to be displayed in jsp page is left pending.
Here is my code for jsp,i want know how to write an action for this,tried doing the same in java and I'm successful.but what I need is how to fetch the updated information in the user interface.
I've made both editable as well as non editable info in the same page with different actions.
pl help me,I'm a newbie
<%@ taglib uri="/WEB-INF/struts-bean" prefix="bean" %>
<%@ taglib uri="/WEB-INF/struts-html" prefix="html" %>
<%@ taglib uri="/WEB-INF/struts-logic" prefix="logic" %>
<%@ page language="java" %>
<%@ page import="java.util.ArrayList,java.util.Iterator" %>
<%@ page import="com.finocus.common.container.CustomerDetailsTest;" %>
<html:html>
<head>
 <title>CUSTOMER DISPLAY</title>
</head>
<body>
 <table width="100%" bgcolor="darkkhaki">
 <tr>
 <td><table width="100%" bgcolor="indigo">
 <tr>
 <td>Display</td>
 <td>Update</td>
 <td>Verify</td>
 <td>Confirm</td>
 </tr>
 </table>
 </td>
 </tr>
<%
 //Container for holding data
 ArrayList list = (ArrayList)session.getAttribute("CUSTOMERDETAILS");
 Iterator itr=list.iterator();
 while(itr.hasNext())
 CustomerDetailsTest cust = (CustomerDetailsTest) itr.next();
 System.out.println("testGetCustomerDetails()-successed. retrieved CustomerDetailsTest="+cust.toString());
%>
<%
 //Session for checking whether edit or non-edit mode
 String pageMode = (String)session.getAttribute("CUSTOMER_PAGE_MODE");
 session.removeAttribute("CUSTOMER_PAGE_MODE");
 if(null==pageMode)
 pageMode = "EDIT";
 if(pageMode.equals("EDIT"))
 //display data in the form
 System.out.println("Editable mode");
%>
 <html:form action="/nonedit">
 <tr>
 <td><table width="100%" bgcolor="darkkhaki">
 <tr>
 <td><bean:message key="label.id"/></td>
 <td><%=cust.getCusId()%></td>
 </tr> 
 <td>
 
 <bean:message key="label.Company"/>
 </td> 
 <tr>
 <td><bean:message key="label.cname"/></td>
 <td><html:text property="name" value="<%=cust.getCname()%>"/></td>
 <td><bean:message key="label.cphone"/></td>
 <td><html:text property="phone" value="<%=cust.getCphone()%>"/></td>
 </tr> 
 <tr>
 <td><bean:message key="label.caddr1"/></td>
 <td><html:text property="address1" value="<%=cust.getCaddress1()%>"/></td>
 <td><bean:message key="label.cemail"/></td>
 <td><html:text property="email" value="<%=cust.getCemail()%>"/></td>
 </tr> 
 <tr>
 <td><bean:message key="label.caddr2"/></td>
 <td><html:text property="address2" value="<%=cust.getCaddress2()%>"/></td>
 <td><bean:message key="label.cfax"/></td>
 <td><html:text property="fax" value="<%=cust.getCfax()%>"/></td>
 </tr> 
 <tr>
 <td><bean:message key="label.ccity"/></td>
 <td><html:text property="city" value="<%=cust.getCcity()%>"/></td>
 <td><bean:message key="label.czip"/></td>
 <td><html:text property="zip" value="<%=cust.getZip()%>"/></td>
 </tr> 
 <tr>
 <td><bean:message key="label.cstate"/></td>
 <td><html:text property="state" value="<%=cust.getCstate()%>"/></td>
 </tr> 
 <td>
 
 <bean:message key="label.Admin"/>
 </td> 
 <tr>
 <td><bean:message key="label.AAname"/></td>
 <td><html:text property="adminname" value="<%=cust.getAname()%>"/></td>
 </tr> 
 <tr>
 <td><bean:message key="label.AAemail"/></td>
 <td><html:text property="adminemail" value="<%=cust.getAemail()%>"/></td>
 </tr> 
 <tr>
 <td><bean:message key="label.AAphone"/></td>
 <td><html:text property="adminphone" value="<%=cust.getAphone()%>"/></td>
 </tr> 
 <td>
 
 <bean:message key="label.User"/>
 </td> 
 <tr>
 <td><bean:message key="label.AUname"/></td>
 <td><html:text property="adminusername" value="<%=cust.getUname()%>"/></td>
 </tr> 
 <tr>
 <td><bean:message key="label.AUemail"/></td>
 <td><html:text property="adminuseremail" value="<%=cust.getUemail()%>"/></td>
 </tr> 
 <tr align="center">
 <td><html:cancel value="Cancel"/>
 <html:submit value="Next"/></td>
 </tr>
 </html:form>
<%
 }else
 //display data in the text
 System.out.println("Non-Editable mode");
%>
 <html:form action="/edit">
 <tr>
 <td><table width="100%" bgcolor="darkkhaki">
 <tr>
 <td><bean:message key="label.id"/></td>
 <td><%=cust.getCusId()%></td>
 <td><bean:message key="label.status"/></td>
 <td><%=cust.getStatus() %></td>
 </tr> 
 <td>
 
 <bean:message key="label.Company"/>
 </td> 
 <tr>
 <td><bean:message key="label.cname"/></td>
 <td><%=cust.getCname()%></td>
 <td><bean:message key="label.cphone"/></td>
 <td><%=cust.getCphone()%></td>
 </tr> 
 <tr>
 <td><bean:message key="label.caddr1"/></td>
 <td><%=cust.getCaddress1()%></td>
 <td><bean:message key="label.cemail"/></td>
 <td><%=cust.getCemail()%></td>
 </tr> 
 <tr>
 <td><bean:message key="label.caddr2"/></td>
 <td><%=cust.getCaddress2()%></td>
 <td><bean:message key="label.cfax"/></td>
 <td><%=cust.getCfax()%></td>
 </tr> 
 <tr>
 <td><bean:message key="label.ccity"/></td>
 <td><%=cust.getCcity()%></td>
 <td><bean:message key="label.czip"/></td>
 <td><%=cust.getZip()%></td>
 </tr> 
 <tr>
 <td><bean:message key="label.cstate"/></td>
 <td><%=cust.getCstate()%></td>
 </tr> 
 <td>
 
 <bean:message key="label.Admin"/>
 </td> 
 <tr>
 <td><bean:message key="label.AAname"/></td>
 <td><%=cust.getAname()%></td>
 </tr> 
 <tr>
 <td><bean:message key="label.AAemail"/></td>
 <td><%=cust.getAemail()%></td>
 </tr> 
 <tr>
 <td><bean:message key="label.AAphone"/></td>
 <td><%=cust.getAphone()%></td>
 </tr> 
 <td>
 
 <bean:message key="label.User"/>
 </td> 
 <tr>
 <td><bean:message key="label.AUname"/></td>
 <td><%=cust.getUname()%></td>
 </tr> 
 <tr>
 <td><bean:message key="label.AUemail"/></td>
 <td><%=cust.getUemail()%></td>
 </tr> 
 <tr align="center">
 <td><html:submit value="Update"/></td>
 </tr>
 </html:form>
<%
%>
<%
%>
 </table>
 </td>
 </tr>
 </table>
</body>
</html:html>

u r using action classes. so after calling the insert method in Action Class to a dao... the next statement should be retrieve statement. so at the time of updating first it will get updated.. the next statement it will execute is retrieve and then set these details in VO or FORM and show it on JSP
Message was edited by:
leo_michael

Disabling User specific/Default Setting

In the output of CV04n selection while 'Save Layout' how is it possible to enable/disable
'User Specific' or 'Default setting'

Hi,
Did you mean Set or enable / disable? Anyways if you want to set, you can do it as follows:
1. Global: I.e. Available for all
Selection Variant: Global do not toggle the User specific box
Description: XYZ
2. User Specific: Available only for the user
Selection Variant: aaa Toggle the user specific box.
Description: uvw
If this doesn't answer your query, please explain further.
regards
C

Disabling User instead of deleting

I'm using OIM 9031.
I've created a custom access policy which grants user a resource (OEBS) based on his group membership.
When user is no longer a member of group, his account is deleted from assigned resource. How do I change the behavior of OIM so that user account in OEBS would be blocked instead of completely deleted?

Yes, I want the account to be reanabled after the user is a member of a group again. No idea how to change the provisioning workflow...
Maybe, I should add two new tasks, for enabling/disabling user, but then I must somehow incorporate 'enable user' task into my workflow. It may require 3rd task which checks if user account already exists (e.g. is user already provisioned the resource) and depending on response code, it may launch either create or enable task...

How to enable/disable the input fields based on the data entered/user action in the web dynpro abap?

How to enable/disable the input fields based on the data entered in the web dynpro application abap? If the user enters data in one input field then only the next input field should be enabled else it should be in disabled state. Please guide.

Hi,
Try this code.
First create a attribute with the name readonly of type wdy_boolean and bind it read_only property of input field of which is you want to enable or disable.
Next go to Init method.
Set the readonly value as 'X'.
DATA lo_el_context TYPE REF TO if_wd_context_element.
 DATA ls_context TYPE wd_this->element_context.
 DATA lv_visible TYPE wd_this->element_context-visible.
* get element via lead selection
 lo_el_context = wd_context->get_element( ).
* @TODO handle not set lead selection
 IF lo_el_context IS INITIAL.
 ENDIF.
* @TODO fill attribute
* lv_visible = 1.
* set single attribute
 lo_el_context->set_attribute(
 name = `READONLY`
 value = 'X').
After that Go to the Action ENTER.
First read the input field ( first input field, which is value entered field) , next give a condition
if input value is not initial then set the readonly value is ' '.
DATA lo_nd_input TYPE REF TO if_wd_context_node.
 DATA lo_el_input TYPE REF TO if_wd_context_element.
 DATA ls_input TYPE wd_this->element_input.
 DATA lv_vbeln TYPE wd_this->element_input-vbeln.
* navigate from <CONTEXT> to <INPUT> via lead selection
 lo_nd_input = wd_context->get_child_node( name = wd_this->wdctx_input ).
* @TODO handle non existant child
* IF lo_nd_input IS INITIAL.
* ENDIF.
* get element via lead selection
 lo_el_input = lo_nd_input->get_element( ).
* @TODO handle not set lead selection
 IF lo_el_input IS INITIAL.
 ENDIF.
* get single attribute
 lo_el_input->get_attribute(
 EXPORTING
 name = `VBELN`
 IMPORTING
 value = lv_vbeln ).
if lv_vbeln IS not INITIAL.
 DATA lo_el_context TYPE REF TO if_wd_context_element.
 DATA ls_context TYPE wd_this->element_context.
 DATA lv_visible TYPE wd_this->element_context-visible.
* get element via lead selection
 lo_el_context = wd_context->get_element( ).
* @TODO handle not set lead selection
 IF lo_el_context IS INITIAL.
 ENDIF.
* @TODO fill attribute
* lv_visible = 1.
* set single attribute
 lo_el_context->set_attribute(
 name = `READONLY`
 value = ' ' ).

Updater fails 9.1.1 to 9.1.2 - msg "re-enable disabled components"

Adobe reader 9.1.1 won't update itself via updates, nor will the stand alone updater work.
The "re-enable disabled components" message referred to with other products pops up.
I've deleted the app. Deleted all pref and lib/app support files. Reinstalled, and hit the same wall.
The computer is PPC running 10.5.7.
The HD is formatted w/ a case-sensitive journaled HFS.

Michael:
Thanks for your speedy reply.
Adobe Reader has worked atop case sensitive file systems for me for some time. I began using them in 10.4 Tiger, though they were introduced as an option going back to 10.3 Panther, which was released to the public 10/2003, and developers like Adobe before that.
If the file system is not supported then it should be clearly, and prominently noted on the download page, and perhaps a warning in the installer (if the installer can't itself test for the presence/type of file system and put up some dialog box warning of pending difficulties).
While I don't use/have no need for the CS, I'm aware of the issues Adobe had w/ the CS suite and case sensitivity (it was just reported in the mac news) but I don't ever recollect seeing that Reader was affected. Certainly finding out that this is the case by doing google searching, troubleshooting, and help forums takes a distant rear seat to getting warned up front.
Just to make sure, I went to the download page (no warning), went to system requirements (no warning), and opened up the files that are downloaded (and again, no warning in the installers).
As a layperson I have trouble imagining that the coding/development of a PDF reader would be inconsistent to the point that it breaks down trying to point to its own components..but that is probably an oversimplification.
Hope that it is resolved, and that until then appropriate warnings are offered to end users.
Thanks again for your time and interest.

Enabling/Disabling/Deleting AD users - Xellerate

Hi,
I have trusted resource reconciliation from AD to Xellerate. So, I am able to create/modify a user in AD and this will create/update the user in Xellerate.
But, how can I implement disable, enable and delete user logic such that when a user is disabled/enabled/delete from AD then this will be reflected in Xellerate?
Any help is greatly appreciated. Thanks in advance!

Hi,
Disable Users: Nobody can log in to the mailbox, but the data is safe and it can receive email. Once it is enabled, it is back to normal.
Delete Users: when the user is deleted all the services are removed and all data is erased. The user is deleted from our Active Directory. If you create a user with the same Name and Emial address again, no data or services are recovered.
If you disable a user, the Active Directory object remains untouched together with the mailbox data and properties, but you will not be able to access any mailbox data.
If you delete a user, the Active Directory object is removed together with all data and properties of the user.
Hope it helps.
Regards,
Blair Deng
Blair Deng
TechNet Community Support

Error while Enabling Active Data Cache Clustering Services: error 1753

I have installed the Oracle BAM with Enterprise link.All the installation was successful.But while Enabling Active Data Cache Clustering Services using the following command:
cluster.exe restype "Oracle Business Activity Monitoring Active Data Cache" /create /dll:"C:\OracleBAM\ADCClusterResourceType.dll"
i am getting the folllowing error:
System error 1753 has occurred.
There are no more endpoints available from the endpoint mapper.
Although i stopped the Active Data Cache Service..?
I am unable to resolve it
Kindly help me out
Ramesh Nambala

Hi.
I encountered the same problem. In my case, the reason was that I created a new user for BAM (to be provided when installing BAM) but ran the installation under another user account. It seems like these users must be the same to make it work.
Greetings,
cor

Disable User on updating an User attribute in OIM

Hi,
I have OIM 11g R2 with LDAP SYNC enabled with OID through OVD.
I want to trigger Disable user on modifying an UDF attribute of user.
Like if attribute1 of user is set to true then disabke user operation should be triggered for the user.
So first in my adapter i will check whether attribute is true and then trigger disable user.
In 11g R2 as mapping adapters attached to Users form in dataobject manager is not supported i am not able to map to the userdefinition and hence not able to check if attribute1 is true or false.
Please help and let me know if this can be achieved in any other way.
Edited by: 988070 on Mar 20, 2013 3:55 AM

You can write a post process event handler:
It will update the user status to disable when UDF attrtibute is set to true.
For this, you need to set the condition as:
Get the value of user defined attribute and store it in a variable "flag".
disable UserManagerResult disable(java.lang.String attributeName, java.lang.Object attributeValue) //attributeName will be user defined fieldm value will be "true"
throws ValidationFailedException,
oracle.iam.platform.authz.exception.AccessDeniedException,
UserDisableException,
NoSuchUserException,
SearchKeyNotUniqueException
Disables the user account matching the search criteria.
Parameters:
attributeName - - The attribute name for the search criteria.
attributeValue - - The attribute value for the search criteria.
Returns:
UserManagerResult containing the entity id of the disabled user.
Cheers,
Vamsi.

Disable JRE Auto update in Vista for all users?

I feel like a complete idiot that I can't figure this out, but it's either so obvious I'm overlooking it, or I just plain can't figure it out, so I'm hoping someone here can help.
We have not yet been able to figure out how to simply disabled the Auto Update option when installing JRE under Vista, so it will never check for updates, no matter what user is logged into a pc. I've just installed the newest version 1.6.0_05-b13, but get the same results.
Basically, we are creating a "base clone image" of a Vista workstation and we need the auto update feature of the JRE to be disabled so it doesn't check for updates. When a new user logs into the pc, we want them to 'inherit' this setting from the default user profile, or we simply want a 'global' setting on the pc that stops all JAVA update checks from occuring. But even though there are multiple registry keys that 'look' like they control the auto update function, no matter how we set them the update option still shows it is enabled when you open the JAVA control panel.
We have 2 basic problems:
- When a standard user runs the JAVA Control Panel applet and they select the 'Update' tab, the option to "uncheck" autoupdates is "grayed out". If we make the user a local administrator, then it is not grayed out anymore and they can set the option. Problem is, we have thousands of users and none of them are local administrators, hence the problem of getting it to already be defaulted to not check for updates. How do we get the update checkbox to NOT be grayed out for a NON-administrator?
- How do we set the 'global' (or default) option to disable the auto update checkbox for ALL users? No matter what we try, when a new user logs in, the auto update feature is still enabled after their initial profile is generated from the first time login.
I was able to figure out if I change the "EnableJavaUpdate" value in the below registry key, it will "remove" the Update tab from the JAVA Control Panel. But does the simply remove the tab? Or does it remove the tab AND disable auto updates for ALL users on the computer?
HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy
I've sent multiple emails to Sun asking for help on what should be a simple thing to do, but have never received a reply from them.
Keith Hemmelman

Thank you for the reply. I apologize for not getting back here sooner.
We actually already use a deployment.properties file located under the Default User profile on our Vista setup. It's located under the "C:\Users\Default\AppData\LocalLow\Sun\Java\Deployment" folder. This file does get copied over to a new user profile when a new person logs in. This is what we want since we have set things like the maximum cache size and temporary file location.
The problem though is there is no setting that disables the automatic update check within this file. The best I can figure out is that for some reason under the Vista environment, the auto update setting is controlled in the registry at: HKEY_CURRENT_USER\Software\JavaSoft\Java Update\Policy
There is a REG_BINARY key there that appears to control this option. It is named "EnableAutoUpdateCheck". The problem is that the value of this key is "several" characters long and it is "different" from one user to the next. I tried disabling auto update under the Java Control Panel and then copied the value of this key into the same aread of the Default User hive but when a new user logs in, it ignores that setting and auto update is still enabled. I also tried using a simple "0" to disable the autoupdate or a "1" to enable it for this key, but it doesn't work either. (This is very frustrating why there isn't a simple 1 or 0 setting to turn the auto update setting on/off.)
We had no problem getting this to work under XP. Basically we didn't have to do anything special in XP. We simply created a temporary user account and made all the settings we wanted and then copied that profile over to our Default User profile and the Java autoupdate setting under the Java Control Panel was disabled for all new users. We did the same thing under Vista, but the auto update setting was ignored and re-enabled for all new users.
I read through the settings for the deployment.properties file located at the below link, but there is nothing there to control the auto update setting.
http://java.sun.com/j2se/1.5.0/docs/guide/deployment/deployment-guide/properties.html
Thus, we can't get the auto update setting to be disabled in the default user profile so it will in turn be disabled for all new users that log into the computer. This is extremely frustrating.
The other equally frustrating problem we have run into under the Vista environment is that when you run the Java Control Panel, the option to disable the auto update check is "grayed out" and the user can't uncheck this option to disable auto update. We have found you must be an administrator before this option is no longer grayed out. Since none of our thousands of users are admins, this is also a problem for us. (This option works fine for a standard user if you are on a XP machine though. It's just Vista where things have changed.)
I've sent repeated emails to Sun in the past asking for help, but they never replied.
Keith

Disabling user through API call -process task-followed by an Enable User...

Hi,
I am running on OIM 9.1 BP11. I implemented a process task to disable the user based on a URS form field change.
I can confirm from the log file and the resource that the Disable user (xellerate user) happened. But the user got enabled back right away. The log file showed that a scheduled task named "Enable User After Start Date" ran and enable the user. So, I disabled that scheduled task.
Then I repeated the test again. I observed the same behavior of user being disabled and enabled again but this time, OIM called an adapter. This is what I observed in the log file:
20988 INFO,20 Oct 2010 12:21:56,519,[XELLERATE.DATABASE],DB read: select evt.ev t_key, evt.evt_name, evt.evt_package, mil.mil_name from mil mil, evt evt w here evt.evt_key = mil.evt_key and mil.mil_key=10
20989 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.DATABASE],select evt.evt_key, ev t.evt_name, evt.evt_package, mil.mil_name from mil mil, evt evt where evt. evt_key = mil.evt_key and mil.mil_key=10
20990 INFO,20 Oct 2010 12:21:56,519,[XELLERATE.PERFORMANCE],Query: DB: 0, LOAD: 0, TOTAL: 0
20991 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.SERVER],Class/Method: tcBusiness Obj/getSqlOperationFromMembers entered.
20992 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.SERVER],Class/Method: tcBusiness Obj/getSqlOperationFromMembers left.
20993 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.ADAPTERS],Class/Method: tcADPCla ssLoader/getClassLoader entered.
20994 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.ADAPTERS],Class/Method: tcADPCla ssLoader/getClassLoader left.
20995 DEBUG,20 Oct 2010 12:21:56,520,[XELLERATE.ADAPTERS],Class/Method: tcADPCla ssLoader/findClass entered.
20996 INFO,20 Oct 2010 12:21:56,530,[XELLERATE.ADAPTERS],Adapter: Enabling the User was initiated for the task: Enable User.
20997 INFO,20 Oct 2010 12:21:56,531,[XELLERATE.JAVACLIENT],System Event Handler : Enabling the User
I did exactly the same disabling user process at another client and it worked fine. I don't understand what causes OIM to call this system Event handler to re-enable the user.
Please help.
Thanks
Khanh

Do you have any Entity Adapter or Event Handler or Trigger which enables user for some condition ?
Check your environment. If you have please remove that and try.
Does this user has and provisioned resource ? If yes, try for some other user which doesn't have resource provisioned.

Updating date while enabling/Disabling user in AD

Similar Messages

Maybe you are looking for