Question

Disable End Users imported from LDAP

  • 16 November 2022
  • 9 replies
  • 38 views
Vixer

Is there a way to manually disable users imported from LDAP? We’ve reached our license limit of users and now its disabling users that need to be enabled. We have some users that don’t need to be enabled but when we click disable for those users it doesn’t disable them. 

9 replies

D

I’m in the same boat. I was told by technical support to build a seperate group and only put those individuals that need added to SysAid in the group. This will stop the imports of other users who are not needed in the database and stop it from automatically granting the first 120 users access and disabling the rest. I’m still trying to work that part out, and I’ll let you know if I get it functioning correctly.

jsidoti

If you go to Tools, End Users

you can select multiple users and bulk update using Mode, disable

 

but the better solution iis to indeed create a group in LDAP for sysaid and only import that group under Intrgration, LDAP, User Roots

 

John

D

I required technical support for assistance as it wasn’t that simple. I have over 12 years of data and the simple solution was erasing users and starting over - But there was no retaining prior user data in tickets. That presented a problem for me. At this point, the issue is fixed. However it did require some support as it was not as straightforward as it could be.

jsidoti

I required technical support for assistance as it wasn’t that simple. I have over 12 years of data and the simple solution was erasing users and starting over - But there was no retaining prior user data in tickets. That presented a problem for me. At this point, the issue is fixed. However it did require some support as it was not as straightforward as it could be.

Erasing the userbase is never easy.. that history can be invaluable

Vixer

@dnudo So just to be clear before I try this, if you use the group method, you will lose your user data from those users? Even if the users are in the newly imported group? What was your solution?

I would also prefer to not lose the +10 years of user data if possible

@jsidoti - the bulk update doesn’t work, the users still show as active in sysaid.

 

Thanks for the help!

jsidoti

@Vixer 

not sure about that.. I just testing it on my on-prem install and the bulk update worked

sounds like you might be having an issue that requires support

Maayan Karstaedt
Rank
Userlevel 4
Badge

Hi all,

So happy to see the lively conversation here, will try to fill in some of the holes that arose: 

  1. Disable user from List View can’t be applied to user generated from LDAP (and the likes) integration and can only be applied to local users
  1. From actions perspective, if you: 

Delete user - it will delete user history as well 

Disable user - it will preserve activity history across tickets 

 

  1. Regarding grouping in your active directory:
  • Are the users you want disabled in SysAid already also disabled in the Active Directory? 

Then you can create a simple filter in SysAid following this guide (requires login): 

https://helpdesk.sysaid.com/FAQTree.jsp?id=1

Also make sure this check box is checked:

It will disable users that were generated in the past by the active directory and were not part of the latest import/sync. 

 

  • Are the user you want disabled in SysAid still marked active in your Active directory? 

Then you will need to create an OU that will group all users you don't want imported to SysAid manually or based on filters in the Active Directory side.  In SysAid you will list all the OU you want to import allowing disregarding the OU you don’t and with the checkbox above it should disable the deprecated users as part of the regular sync. 

 

Let us know what you think!

 

 

 

Explore. Network. Share.
Vixer

Hey @Maayan Karstaedt,

Thanks for the info! Yes, we currently have the disabled users setting set. Our current problem is we have active users in our AD that don’t need to be active in SysAid. Rearranging our AD folder structure just to accommodate a few users that need disabled is a little tough to sell. :) I’m still playing around with the LDAP settings and groups to see if I can find a better solution.

Thanks.

Karlson
Userlevel 4

Hi guys,
following the whole history here is about not losing 10 years of data and disabling users.

The LDAP configuration does not offer a function in SysAid to keep the data if you have to delete the users in SysAid from license rights. You can also create new groups in your LDAP that are not included in the SysAid LDAP configuration.

The situation is different for the administrators, here you will be asked where the allocation of the ticket stock should be made!

I have wished for this function for the user base for years.

Up until two years ago, we reconfigured and rebuilt all of our LDAP servers. For example, the user IDs of the employees have also changed. Since these changes, we have only had the option of renaming the old users with a special character, for example <User 1 ->, so as not to lose the inventory. This was necessary because the email addresses of the users remained the same

Since then we are waiting for a conversion function for users in SysAid :-)

cheers
Karlson

Reply


Terms & ConditionsCookie settings