This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Need a way to not delete an account that is marked for litigation hold

Hello Community,

 

I'm trying to find a way that i can incorporate into my standard Deprovision Policy explained below.

Corp deprovisioning policy for users.
Disable Account
Sets Password Random
Group membership – Remove!
Exchange Mailbox – disable / Hide from GAL
HomeFolder – disable / remove user access
Move to OU=Disabled Users
Delete in 30 days 
Description = “Terminated YYYY-MM-DD by <Account> - %description%”

 

I need to add the following somehow Delete in 30 days "only if LitigationHoldEnabled AD attribute is FALSE

 

Anyone can give me any help?

Thank you

 

Todd Tobias

Todd_Tobias@ultimatesoftware.com

Parents
  • Understood. You could probably achieve this easily with an AR workflow that:

    1) Detects the user deprovision action (trigger condition)
    2) Checks to see if msExchLitigationHoldDate is populated (Within the workflow, an If / Then Activity on the user property)
    3) If it is populated, then clear the deprovision date virtual attribute (built in "Update" activity)
Reply
  • Understood. You could probably achieve this easily with an AR workflow that:

    1) Detects the user deprovision action (trigger condition)
    2) Checks to see if msExchLitigationHoldDate is populated (Within the workflow, an If / Then Activity on the user property)
    3) If it is populated, then clear the deprovision date virtual attribute (built in "Update" activity)
Children
No Data