Monday, March 4, 2013

Disabled accounts in AD show up in SharePoint as active profiles

Problem Description:
If the proper filer is not applied in import connections then it can lead to hundreds of unwanted / disabled profile in ssp database. Sometimes due to IT audits we want to get rid of those profiles from SharePoint.

Product Applies:
1.    MOSS2007 (Microsoft Office SharePoint Server 2007)
2.    WSS3.0 Windows SharePoint Services 3.0)

Error Message: N/A

What exactly I did? How exactly I configured and came to know about the issue?
1.    In AD, I have created lots of user and disabled few of them.

2.    Configured SSP to import user profile by using the default filter
(&(objectCategory=person)(objectClass=user).

3.    That’s it-Problem started and found lots of profiles in view user profile.

Resolution:
At first apply filter
(&(objectCategory=person)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
to just import active profiles in connection.

Run full profile import three times back to back.
After that you will find users in view user profile > Profile Missing from import.
You can manually delete these unwanted profile or wait till clean up job delete them.

No comments:

Popular Posts

Disclaimer

The opinions expressed on this blog are the personal views of Pratik's SharePoint Blog, and do not represent or reflect the viewpoints or policies of any past, present, or future employer, colleague, or customer, or any other entity. The posts on this blog are provided ‘as is’ with no warranties, express or implied, and confer no rights. Use of information contained within this blog, including specific technical steps mentioned herein, is at your own risk. References to specific software products, processes, resources, or companies do not imply any endorsement.