Hi,
I want know, how can i calculate the is_disabled attribute for account, collected using an active directory collector?
In my current account collector, i put userAccountControl in Account status
But when i go to Resources > Directories > Active directory > Accounts, I notice that all accounts are active even if in their account status, they are disabled
Regards.
try the following:
In your directory configuration, set:
Allow Account Disabling and Allow account Locking to Yes
In your account collector you will see Account Disabled and Account Locked checkboxes
From the help:
Allow Account Disabling — Select if this directory supports disabling of its accounts.
Allow Account Locking — Select if this directory supports locking of its accounts.
The account disabling and locking settings determine whether the options in an account collector definition that allow you to configure the account collectors to collect data about disabled and locked accounts (the collect account is disabled or locked or both) and whether account disabling and locking actions can be performed throughout the RSA IMG application.
The account disabling option need to be enabled on application as Boris mentioned. The attribute will then show up in ADC. For some ADC's like AD, it will appear with a checkbox option because there is a standard way to know if an account is disabled or not(Like in case of AD) and the collector will use that way to fetch the value for the attribute
try the following:
In your directory configuration, set:
Allow Account Disabling and Allow account Locking to Yes
In your account collector you will see Account Disabled and Account Locked checkboxes
From the help: