User constantly Disabled

Hi this problem has me baffled. While users are logged-in, for no obvious reason they will be marked as having no access in the Workgroup Manager and can no longer attach or get mail.
This problem is getting worse and now occurs every couple of hours. Initially it occured every few days which made me think that it was security related.
I have tightened up security in firewall, no effect.
I have made sure that users are not disabled with failed logins, still no effect.
Server is Xserve running 10.4.6. Users have variety of iMac, Mac Mini's and PowerMac's all running 10.4.6
Any clues out there???
Thanks in advance

Hi
Just create an entity adapter which will set the User's Provisioning Date as Today's Date.
Adapter:
Create a variable of date type and map it to System Date.
Add one Logic Task and select set variable there.
Variable Name > Adapter Return Variable
Operand Type > variable
Operand Qualifier > your variable name
Now attach this adapter in your Users Form (Pre Insert) and map the return variable with User Provisioning Date.
It will work.
There is a schedule task Set User Provisioned Date which runs automatically in 30 minutes. It will reevaluate the access policies.

Similar Messages

How to find out if a user is disabled in xpress code?

I have an active sync form and I'm trying to determine as one of my checks if a user is disabled. I've tried using waveset.disabled, but that always returns null. I also tried waveset.organization to see if the user is in the 'terminate' organization, but it only always returns 'Top' and not 'Top:Terminate'
Any ideas how I can find out if a user account is disabled?
Thanks for any info!

Hi,
These two attributes you can only get in userview.
waveset.disabled (this is always null if user is not disble else return true if user is disble)
waveset.organization (will give you the whole org path like Top:xyz)
take a dump of your userview and see what you are getting there.
Use below code in you form/WF to see the userview on console
<block trace='true'>
<invoke name='toXml'>
<ref>userview</ref> // user your userview object name
</invoke>
</block>

SQL content database is locking when a user is disabled in Active Directory.

We have an issue, first of all we are running custom code in C# within a visual web part to "Offboard Users". In essence it disables their AD account and moves it to another OU using the ActiveDirectoryServiceClient.
Sometimes it works seamlessly, other times it causes a lock in the SQL content DB. The list ID that always comes up with the error is the User Information List. I have researched that SharePoint will update the UserInfo table with tp_Deleted when a
user is Disabled. Would this also update the AllUserData table with a corresponding int value due to the foreign key relationships between these two tables? If so could this update be causing the SQL lock? Is there anything we can do to expedite the
process, it runs really long, goes to critical, locks the DB, proceeds to completion successfully, but meanwhile users cannot interact with the site. The list is indexed on user name and work email. It is close to 4,000 list items, but broken into views. However
I don't think this has anything to do with the list itself as the Profile Service should be updating the list, the code does not.
We have separate DB for each site collection and all are within / under the 100GB limit.
How is the AllUserData table updated from the UserInfo table?
Thank You,
Crjangel
Frances Garland

I wouldn't have expected such a problem, but there you are :-(. Luckily you can analyze further by issuing a SQL DMV query providing details about existing locks, for instance using this one:
http://www.toadworld.com/platforms/sql-server/b/weblog/archive/2013/08/11/dmv-13-finding-locking-amp-blocking-sys-dm-tran-locks.aspx
Kind regards,
Margriet Bruggeman
Lois & Clark IT Services
web site: http://www.loisandclark.eu
blog: http://www.sharepointdragons.com

WLC 4404 Wireless users getting disabled

Currently Being Moderated
Wireless users getting disabled
Hi,
I have WLC 4404 with 7.0.116.0 version. I was getting following messages for particular APs
*Dec 20 14:11:13.875: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec 20 14:11:13.908: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 20 14:11:29.383: %LWAPP-5-RLDP: RLDP stopped on slot 0.
*Dec 20 14:11:29.674: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec 20 14:11:29.678: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec 20 14:11:29.700: %LWAPP-5-RLDP: RLDP started on slot 0.
*Dec 20 14:11:29.707: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 20 14:11:29.752: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec 20 14:11:29.757: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec 20 14:11:29.790: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 20 14:11:45.396: %LWAPP-5-RLDP: RLDP stopped on slot 0. *Dec 20 14:11:13.875: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
After seeing one of the cisco forum, I have disabled RLDP for that particular APs
so above messages are rectified.
But right now we are not able to identify Rogue IP and it is not contained.
So please give any suggetion so that i can rectify the above messages as well as i can identify the rogue IP.
Thanks & Regards
Gaurav Pandya

Hi Scott,
You are right i am not able to detect rogue APs because i disabled the RLDP. but when i enable the RLDP for that particular AP. i got the following messages with interface go up and down
*Dec 20 14:11:13.875: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec 20 14:11:13.908: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 20 14:11:29.383: %LWAPP-5-RLDP: RLDP stopped on slot 0.
*Dec 20 14:11:29.674: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec 20 14:11:29.678: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec 20 14:11:29.700: %LWAPP-5-RLDP: RLDP started on slot 0.
So please suggest me the mid way so that i can enable the RLDP (Detect the rogue APs) with out interface going up and down frequently.
Regards
Gaurav

Removing the entitlement wher user gost disabled OIM11g R2

Hi Expert,
I am trying to writing the scheduler for removing the entitlement when user got disabled.
Below is my code:
public class RemoveEntitlement extends TaskSupport {
protected OIMClient oimClient = null;
     private tcLookupOperationsIntf lookupOps;
     private tcUserOperationsIntf userOper;
     private tcObjectOperationsIntf obj;
     private tcFormInstanceOperationsIntf form;
     private UserManager userManager = null;
public void execute() throws Exception {
Connection connection = null;
try {
EntitlementService provisioningService = Platform.getService(EntitlementService.class);
connection = getConnection();
if (connection != null) {
List<Long> entitlementkeys = getEntitlementKey(connection);
if (entitlementkeys != null) {
for (Long entKey : entitlementkeys) {
boolean ent= provisioningService.deleteEntitlement( entKey );
} else {
} catch (Exception e) {
throw e;
} finally {
if (connection != null) {
connection.close();
private List<Long> getEntitlementKey(Connection connection) throws SQLException {
Statement statement = null;
ResultSet resultSet = null;
List<Long> entKeys = new ArrayList<Long>();
try {
statement = connection.createStatement();
resultSet = statement.executeQuery("select ENT_ASSIGN_KEY,USR_KEY,ENT_LIST_KEY from ENT_ASSIGN where USR_KEY IN (select USR_KEY from USR where USR_Disabled='1')");
if (resultSet != null) {
while (resultSet.next()) {
entKeys.add(resultSet.getLong("ENT_LIST_KEY"));
} catch (SQLException e) {
throw e;
} finally {
if (resultSet != null) {
try {
resultSet.close();
} catch (SQLException e) {
if (statement != null) {
try {
statement.close();
} catch (SQLException e) {
return entKeys;
@Override
public HashMap getAttributes() {
// TODO Auto-generated method stub
return null;
@Override
public void setAttributes() {
// TODO Auto-generated method stub
private Connection getConnection() {
Connection connection = null;
try {
connection = Platform.getOperationalDS().getConnection();
} catch (SQLException e) {
throw new SuperRuntimeException(e);
return connection;
when I am trying test from my local (Eclipse) ,getting below error
Mar 25, 2013 7:30:33 PM org.springframework.context.support.AbstractApplicationContext prepareRefresh
INFO: Refreshing org.springframework.context.support.ClassPathXmlApplicationContext@256ef705: display name [org.springframework.context.support.ClassPathXmlApplicationContext@256ef705]; startup date [Mon Mar 25 19:30:32 IST 2013]; root of context hierarchy
Mar 25, 2013 7:30:33 PM org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource [META-INF/iam-spring-config.xml]
Mar 25, 2013 7:30:33 PM oracle.iam.platform.utils.SpringBeanFactory createBeanFactory
SEVERE: Instantiating Spring Bean Factory Failed.IOException parsing XML document from class path resource [META-INF/iam-spring-config.xml]; nested exception is java.io.FileNotFoundException: class path resource [META-INF/iam-spring-config.xml] cannot be opened because it does not exist
Exception in thread "main" java.lang.ExceptionInInitializerError
     at oracle.iam.platform.Platform.<clinit>(Platform.java:101)
     at RemoveEntitlement.execute(RemoveEntitlement.java:75)
     at RemoveEntitlement.main(RemoveEntitlement.java:66)
Caused by: org.springframework.beans.factory.BeanDefinitionStoreException: IOException parsing XML document from class path resource [META-INF/iam-spring-config.xml]; nested exception is java.io.FileNotFoundException: class path resource [META-INF/iam-spring-config.xml] cannot be opened because it does not exist
     at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.loadBeanDefinitions(XmlBeanDefinitionReader.java:349)
Any Help Appreciated...

Depends upon if the domains are part of the same forest. If the account moves from one domain to another in the same forest then I don't think there is any issue with cross domain entitlement assignment as long as your AD supports people in domain to have group from another domain.
-Bikash

How to prevent user from disabling plugins like censureblock or adblock?

I'm thinking about using censureblock and adblock in classroom in school, but it is easy to disable these plugins. Is there a way to prevent users to disable or delete these plugins?

Hi microspace
you mean add-ons, like censureblock or adblock.
see if this helps : [https://addons.mozilla.org/en-US/firefox/addon/public-fox/ Public Fox - addon]
thank you

Not allow users to disable startup script

I have written a User Login script for indesign and have successfully implemented in Indesign CS3. However, anyone can disable the login script that I have put in the Startup script by modifying the Preference setting of the Indesign. I would be very grateful if any one there could suggest me on how to not allow the users to disable the login script put inside the Startup Script folder.
Thanks,
Limbu, Keshar

Thank you very much for you response. But, it is not about the user right permission. There is a selection options in the Perference setting of Indesign. If you untick that option, Indesign will run bypassing the scripts in the startup scripts folder. Is there any way to not allow the users to not select this option so that the startup scripts does not get bypassed?
In the above preference setting the last check box is not selected hence Indesign will bypass all startup scripts. Only if this last option is selected the startup scritps will run.
Thanks
Limbu Keshar

HT5824 why does my ipad say user name disabled, but on all other devices i can pog into itunes and icloud using my user name

why does my ipad say user name disabled but i can use my user name to log into itunes and icloud on other devices

At this time there is no "solution." You'll simply have to wait the 90 days to re-enable iTunes Match.
For now here is my suggestion. In your User Account, in OS X, sign out of whatever iTunes Store account you are signed in with. Then sign in with your store account and leave it at that. Now sign out of your OS X User Account, sign into your wife's OS X User Account and sign into the iTunes Store with her Apple ID (if necessary sign out of the account first).
Now, you can go back to your OS X User Account and attempt to enable iTunes Match. You will probably get the "wait 90 days" message. If so leave it, mark your calendar, and wait for the 90 days to expire. You can try contacting iTunes Store support at <https://expresslane.apple.com> if you wish, but I really do not know how useful that will be.
Incidentally, you get the message to pay for the service when trying to enable it on your wife's Apple ID because the service has not been purchased using that Apple ID. iTunes Match is designed to be a single-user service that is never signed out of and is associated with one, and only one, Apple ID and a regional store.

Enable firewall with GP but allow users to disable....

I'm wondering how I can enable the firewall in group policy but allow a user to disable it if they have to. I see that it says "settings are controlled by group policy" when I go to try to turn it off on a vista machine. Thanks.

Hi,
GPOs do not provide this functionality unless you are using the special group policy preferences settings which do not include control over the firewall. You best bet is probably to simply deploy the OS with the default setting of the firewall being
active and this would allow any local administrator to change the configuration.
Alternatively, you could dig down and determine the registry keys to control the firewall and change those with group policy preferences.
Thanks,
Guy

User Menu Disabled

Hello,
The User Menu for a particular User is disabled.
He can only see the SAP Menu.
How to enable the User Menu?
Thanks in advance

Hi Gautam,
The best way to do this, is to go back and close all the threads which you have started and then use the <a href="https://forums.sdn.sap.com/search.jspa?threadID=&q=usermenudisabled&objID=f208&dateRange=all&numResults=15&rankBy=10001">search</a> before asking questions which have already been answered.
Good luck,
Julius

Can location services get disabled automatically? Or does it always require a user to disable it?

Can location services get disabled automatically? Or does it always require a user to disable it?
I was repeatedly trying to Find my iPhone when it came up with "Location Services Disabled".
Later I was able to find my iPhone again. This has happend severally times lately?
Cold this happen automatically, like a "time out" function?

Can location services get disabled automatically? Or does it always require a user to disable it?
I was repeatedly trying to Find my iPhone when it came up with "Location Services Disabled".
Later I was able to find my iPhone again. This has happend severally times lately?
Cold this happen automatically, like a "time out" function?

Removing the Auto disable of a resource when user is disabled

Hi All,
We have a few resources a user may have that when the user is disabled in OIM we want those hand full of resource to stay Enabled/Provisioned.
I tried renaming the disable task. didn't work (Get an error). I tried setting No Effect on the process task and well, no effect still get an error.
Thanx.
Fred

I might be wrong about this but aren't what task get called on a disable controlled by the disable effect? This would logically mean that the name of the task doesn't matter?
Fred: I have seen cases where the design tool simply doesn't want to take an update. Sometimes it helps restarting the app server, other times I had to go into the database tables and fix the problem by deleting the offending row. Not elegant but I couldn't figure out any other way to do it.
Good luck
/Martin

How to change the password of ddic in 000,sap* user is disabled

Hi
SAP* user is disabled in 000 client in my production server,I can't enable it as it will require outage which is not possible now
I want to use ddic user to login in 000 but I forgot the password,is there any query to change the password for ddic user.My database is SQL server 2005
Rohit

Hi,
Better to activate SAP* user instead of trying for the DDIC user .
Either use the Query Delete from usr02.sapr3 where bname = 'SAP*' and mandt = '000' or delete the
user SAP* from USR02 table where mandt value is 000 through SQL Visual Studio .
Check the value login/no_automatic_user_sapstar in RZ11 , if it is zero , no need to restart the instance .
Otherwise change it to 0 , restart the instance.
Now you will be able to login with the password pass.
Regards,
Nibu

Determining if a user is disabled in OD using LDAP query

Hello all,
I'm doing a LDAP query against my OD to make a web-based user directory. I'm using PHP and doing a LDAP search against 10.6 Server OD such as this:
$sr=ldap_search($ds, "cn=users,dc=my_server,dc=private", "(CN=*)");
The search is working perfectly, and I'm getting an array result with multiple key/values such as:
objectclass
uidnumber
apple-generateduid
apple-mcxflags
loginshell
etc.......
Since it's a listing of active employees, I want to identify deactivated ones and filter them out of my listing. However, I can't see any key/values that could tell me if a user is deactivated or not.
What would be the best way? Must I run a command line to see if a user is disabled, and if so, what command? (However, this would be poor on performance...)
Thanks.

I looked into this ages ago here:
https://discussions.apple.com/message/6595575#6595575
This information was relevant back in 10.4 which was post NetInfo. All things being equal, this is likely still the case. However, this may have changed and I apologize in advance for not validating.

How to de-provisions user's resource when the user is disable ?

When a user is disable in OIM, I would like OIM to de-provisions all the user's resources.
Is it possible to do it and how to do it ?

Hi Deborah,
I have tried the following configuration, but i am unable to de-provision the resource for the user. The Delete User task is not getting called. Here are the steps that i have followed.
1) Created a Disable User task with conditional checked and Task Effect as Disable.
2) Added a adapter to it, and in the response tab added a new response COMPLETE (adapter will be returning COMPLETE) and given the status for the response as Cancelled.
3) In the Undo/Recovery tab, added the Delete User task.
4) In the Task to Object status mapping, given Revoked for Object status for the Cancelled status.
As per the OIM document the Undo tasks are triggered when the current process task status is Cancelled, but still i found that the undo task is not getting triggered. I have made both Disable and Delete User task as conditional. Also i have added the Delete User task under Undo/Recover tab of Create User task. Can you tell me why the Delete User task is not getting called. Here the user is also not getting deleted from OIM.
Also all the tasks in the resource object are showing the status as Cancelled.
I have created a simple Mobile Phone resource object and done all these steps. Can you tell what went wrong. If i directly deleted the user from Admin console the Delete User task is getting called and user is also getting deleted.

User constantly Disabled

Similar Messages

Maybe you are looking for