This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

v6 Force Full Sync on AD user accounts

Hi,

In v6.12 is there a way to force a full sync on all user accounts? It follows a change to the AD mapping, adding some new attributes, and we wish to bring in those new mapped attributes, even on entries that have not changed recently.

Perhaps there is a global setting to say...bring in all the current values from AD.

thanks,

Rob.

0 Barry Jackson over 6 years ago

Hi Rob,

Been a while but I recall doing this by using SQL to remove objectguid and objectsid from the ADSAccount table.

Proceed with caution!

Cheers, B.
Cancel
Up 0 Down

Cancel
0 Robert Byrne over 6 years ago

Thanks Barry...we are looking at the ADSAccount.FullSyncDate and ADS.FullSyncState attributes, which may be more appropriate.
Cancel
Up 0 Down

Cancel
+1 Trevor Pike over 6 years ago

Hi Robert,

You can enforce that every object has to be changed by removing the ObjectUSN:

update ADSAccount
set ObjectUSN = null

Please ensure you have a database backup before running such statements.

Trevor
Cancel
Up 0 Down

Cancel
0 Robert Byrne over 6 years ago

Hi Trevor,

Thanks for that information, also confirmed here: support.oneidentity.com/.../188364

cheers,
Rob.
Cancel
Up 0 Down

Cancel