...
| Expand |
|---|
| title | SetGroups (Query-Based Collections) |
|---|
|
| Info |
|---|
The names and criteria for queries used in the below SetGroups are not can be edited to meet your own criteria for determining whether an account is stale or not. |
AccountGetPendingTerminationBeforeProcessing — This SetGroup contains all user accounts pending termination that have yet to processed for termination and is used to identify users with accounts that need to be notified that their accounts are pending termination and will be disabled (move and disabled for applicable account stores like Active Directory) their accounts. The default criteria for the accounts being placed in this SetGroup include the following: CleanUp Mode is enabled on the account store with the user accounts and The user account has not been deleted and The user has logged in previously, but has not logged in within 7950 days of the current date or the user account has been disabled for greater than 8000 days and The user account has yet to be transferred to the specified stale OU (where applicable) and The user with the account (and all other specified pending termination notification assignees) have yet to be notified of the pending disabling and termination of their account, or was previously notified 50 days from the current date
AccountGetPendingTerminationNotProcessed — This SetGroup contains all user accounts that have yet to be processed for termination but have been notified that their accounts are pending termination. The default criteria for the accounts being placed in the SetGroup include the following: CleanUp Mode is enabled on the account store with the user accounts and The user account has not been deleted and The user has logged in previously, but has not logged in within 7950 days of the current date or the user account has been disabled for greater than 8000 days and The user account has yet to be transferred to the specified stale OU (where applicable) and The user with the account (and all other specified pending notification assignees) have been notified of the pending disabling and termination of their account
AccountGetPendingTerminationProcessed — This SetGroup contains all user accounts that are ready for final termination. The default criteria for the accounts being placed in the SetGroup include the following: CleanUp Mode is enabled on the account store with the user accounts and The user account has not been deleted and The user with the account has been notified of the pending termination and The account has been disabled (disabled and moved where applicable) for 30 days
|
...
This workflow claims all accounts approved for termination, moves and terminates each one, setting the AccountOrganizationStatusID = 2 (Terminated).
Once an account is terminated, the workflow checks whether the NotifyManager and the NotifyAdminManagementRole parameters are set to true.
If NotifyManager and NotifyAdminManagementRole are set to true, the workflow checks the EmailTemplateManagerDeletionNotification and the EmailTemplateAdminDeletionNotification parameters for the email template that is to be used to send emails to the managers of each terminated user, as well as all admin users belonging to the Management Role specified by the AdminManagementRoleGuids parameter.
| Insert excerpt |
|---|
| IL:External Stylesheet |
|---|
| IL:External Stylesheet |
|---|
| nopanel | true |
|---|
|
...
Next Steps
Configure automated directory cleanup
...