• State Suggested Answer
  • Locked Locked
  • Replies 11 replies
  • Answers 1 answer
  • Subscribers 62 subscribers
  • Views 14396 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Need a way to not delete an account that is marked for litigation hold

todd_tobias
over 7 years ago

Hello Community,

 

I'm trying to find a way that i can incorporate into my standard Deprovision Policy explained below.

Corp deprovisioning policy for users.
Disable Account
Sets Password Random
Group membership – Remove!
Exchange Mailbox – disable / Hide from GAL
HomeFolder – disable / remove user access
Move to OU=Disabled Users
Delete in 30 days 
Description = “Terminated YYYY-MM-DD by <Account> - %description%”

 

I need to add the following somehow Delete in 30 days "only if LitigationHoldEnabled AD attribute is FALSE

 

Anyone can give me any help?

Thank you

 

Todd Tobias

Todd_Tobias@ultimatesoftware.com

Parents
  • 0 over 7 years ago
    A "codeless" way to handle this would be to have two separate OUs for the Deprovisioned Users:

    One for those with litigation hold and one for those without. Then just have two policies applied appropriately on the respective OUs i.e. one with the 30 days and one without.
Reply
  • 0 over 7 years ago
    A "codeless" way to handle this would be to have two separate OUs for the Deprovisioned Users:

    One for those with litigation hold and one for those without. Then just have two policies applied appropriately on the respective OUs i.e. one with the 30 days and one without.
Children
No Data