Remove Account task is not working for some users

[Diwakar]

Hi,

We are triggering the Remove Account task for Inactive AD Accounts through Analytics, however for some users the task is not completing and getting below error in provisioning comments.

""Error while Delete operation for account-a90**** in AD, Cannot delete object as object contains child objects also.Please enable EnforceTreeDeletion configuration or contact Administrator for more details. - [LDAP: error code 66 - 00002015: UpdErr: DSID-031A121E, problem 6003 (CANT_ON_NON_LEAF), data 0 ]""

-We already enabled the enforceTreeDeletion in AD connection.

Please help to identify and fix the issue as its impacting our production operations.

Regards,

Diwakar.

[sudeshjaiswal]

Hello @Diwakar,

• Check if AD Admin delete the account with child objects directly on AD Server without any issue?
• Check if user has multiple subordinates at the target AD Server?
• Check if from AD Admin that AD server supports Tree deletion?
  
  Thanks,

[Diwakar]

Hi @sudeshjaiswal,

• Check if AD Admin delete the account with child objects directly on AD Server without any issue?--We cant delete directly from AD as its prod environment. 
• Check if user has multiple subordinates at the target AD Server?Users doesn't have multiple subordinates at target.
• Check if from AD Admin that AD server supports Tree deletion?Yes it do support tree deletion as I already mentioned for most of the users its working few identified users only its not working.

Please advise further.

Thanks,

Diwakar.

[sudeshjaiswal]

Hello @Diwakar,

This issue was reported earlier and its has been fixed in version 23.6. Please refer the below document
https://docs.saviyntcloud.com/bundle/Release-Notes/page/Content/v23/Release-Notes-23-6.htm 

Thanks

[Diwakar]

Thanks @sudeshjaiswal for the information, so when can Saviynt upgrade my version as well as I am currently running 23.5. Its really urgent to fix the issue with identified users.

Thanks,

Diwakar.

[sudeshjaiswal]

Hello @Diwakar,

Please work with your CSMs to schedule the upgrades activity.

Thanks

[Diwakar]

Thanks @sudeshjaiswal  for your response, we are planning for the upgrade, Is there any workaround to process the remove account task manually as its really important to fix the issue temporarily?

[sudeshjaiswal · Accepted solution]

Hello @Diwakar,

I don't believe we have any workaround to process the "remove account" task manually; the only way to have it fixed is through an upgrade.

Thanks

[Diwakar]

Thanks Sudesh for the confirmation.