Return
-
Title
HOW TO: Search for disabled or enabled users using a Workflow -
Description
When attempting to search for either disabled or enabled users in a search or filter, the attribute edsaAccountIsDisabled returns no results. -
Cause
Active Roles generates the attribute edsaAccountIsDisabled based on the userAccountControl attribute. This is a calculated attribute value (not stored). It is calculated and displayed when retrieving an individual user's properties. The search activity is not able to filter by edsaAccountIsDisabled because of this. -
Resolution
To search for disabled users:
In a Workflow add a Search operation to the Workflow. Next, open the Search operation by double clicking it and performing the following steps:
- Select the Scope and Filter tab
- In the Find drop down selection box select Users
- Select the radial button for Retrieve any objects held in the Organizational Unit or Container
- Specify for Filter the attribute userAccountControl set to bitwise and, with a string value of 2. Click OK, and then select the Save button on the workflow.
To search for enabled users, use the same steps and filter as above but convert the condition group to a NOT AND group.
- Click on the green line (not on the green plus) and choose Covert condition group to... | | NOT AND group
