Announcing the SAVIYNT KNOWLEDGE EXCHANGE unifying the Saviynt forums, documentation, training, and more in a single search tool across platforms. Click HERE to read the Announcement.

EnableAccountJSON in AD connection

HarishG
Regular Contributor
Regular Contributor

Hi,

when we are trying to enable AD account using UserUpdate Rule, the tasks are created and completed after running provisioning Job. But the UserAccountControl of the account is not changed to 512 and still remains as 514. Which makes accounts inactive after running reconciliation job.

Any idea what to change?

EnableAccountJSON:

{
"ENABLEACCOUNTOU": "OU=xxxxxxxx",
"ATTRIBUTESTOCHECK": {
"useraccountcontrol": "514"
},
"USEDNFROMACCOUNT": "YES",
"MOVEDN": "YES",
"AFTERENABLEACTIONS": "{userAccountControl : 512}"
}

 

Best regards

Harish

5 REPLIES 5

rushikeshvartak
All-Star
All-Star

Change 

useraccountcontrol To userAccountControl


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

HarishG
Regular Contributor
Regular Contributor

Hi @rushikeshvartak,

I changed it. But still the same issue. userAccountControl is not changing to 512. 

Screenshot 2022-12-07 at 10.52.06.png

it is also making the accounts inactive and also orphan after running the reconciliation job.

Enakshi
Saviynt Employee
Saviynt Employee

Try this - "AFTERENABLEACTIONS": {"userAccountControl" : "512"}

Please share logs


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Manu269
All-Star
All-Star

check here : https://saviynt.freshdesk.com/support/solutions/articles/43000615764-active-directory-ad-connector-g...

Regards
Manish Kumar
If the response answered your query, please Accept As Solution and Kudos
.