Remove
Disabled User from People Picker
As
we know experience always better then theory but good combination is experience
plus theory of relative experience. This combination enhances your knowledge.
Today,
we have a critical reporting issue from client that is “Employee has left
organization but Employee is still in People Picker”. This issue is related
to User profile Synchronization.
To
overcome this issue we need to creating User profile Synchronization Exclusion
Filters using the Active Directory Attribute ”userAccountControl”. Exclusion
filter has an advantage of reducing the amount of “Junk” in the profile
database and also decrease the time taken to perform synchronization.
The userAccountControl
attribute is used to store the account options for an AD user
object. These options include the status of the account (e.g. disabled, or
locked out). Each option is a property flag. These flags are cumulative and
thus there is only ever one value for userAccountControl. Therefore it makes
sense to create an exclusion filter to avoid synchronizing disabled accounts
and so on.
Let’s Start By clicking on your Synchronization
connection. Then click on Edit Connection Filters. It will refresh and populate
the operators available to us. Choose Bit On equals operator
and set the value 2 and save it.
Run a full synchronization. Now just open
your people picker and test again your issue as reported by client. You will
see. Now your issue has been resolved.
I hope it will
work and help you to overcome this issue.
Comments
Post a Comment