EnableAccountJSON in AD connection

[HarishG]

Hi,

when we are trying to enable AD account using UserUpdate Rule, the tasks are created and completed after running provisioning Job. But the UserAccountControl of the account is not changed to 512 and still remains as 514. Which makes accounts inactive after running reconciliation job.

Any idea what to change?

EnableAccountJSON:

{
"ENABLEACCOUNTOU": "OU=xxxxxxxx",
"ATTRIBUTESTOCHECK": {
"useraccountcontrol": "514"
},
"USEDNFROMACCOUNT": "YES",
"MOVEDN": "YES",
"AFTERENABLEACTIONS": "{userAccountControl : 512}"
}

Best regards

Harish

[rushikeshvartak]

Change 

useraccountcontrol To userAccountControl

[HarishG]

Hi @rushikeshvartak,

I changed it. But still the same issue. userAccountControl is not changing to 512. 

it is also making the accounts inactive and also orphan after running the reconciliation job.

[Enakshi]

Try this - "AFTERENABLEACTIONS": {"userAccountControl" : "512"}

[rushikeshvartak]

Please share logs

[Manu269]

check here : https://saviynt.freshdesk.com/support/solutions/articles/43000615764-active-directory-ad-connector-g...