To configure a Notification Distribution policy
This scenario describes how to configure a policy so that the administrator is notified of deprovisioning objects in any domain registered with Active Roles (managed domain).
To implement this scenario, you must perform the following actions:
As a result, upon a request to deprovision an object, such as a user or group, in any managed domain, the administrator receives an e-mail message informing of the deprovisioning request. The message includes the name of the object to deprovision.
The following two sections elaborate on the steps to implement this scenario.
This scenario assumes that your SMTP server:
Additionally, the service account of the Administration Service is assumed to have a mailbox with the e-mail address of ARSService@mycompany.com.
Create the e-mail configuration by using the Active Roles console:
You can create, configure, and apply the Policy Object you need by using the New Deprovisioning Policy Object wizard. For information about the wizard, see Creating a Policy Object in the Policy Object management tasks section earlier in this chapter.
To configure the policy, click Notification Distribution on the Select Policy Type page of the wizard. Then, click Next.
On the Notification Recipients and Message page, click the button next to the Notification recipients box to display the Deprovisioning Notification Recipients dialog box. In that dialog box, type the administrator’s e-mail address, such as email@example.com, and then click OK.
Then, customize the message subject and the message body as necessary. For example, you might enter the following subject and body:
Deprovisioning of %<objectClass> ’%<name>’ Requested
Deprovisioning of %<objectClass> ’%<name>’ is in progress. Please take any additional deprovisioning actions, if necessary, to complete the deprovisioning of that %<objectClass>.
This notification was generated automatically by Active Roles according to corporate deprovisioning rules.
Click Next to display the Outgoing Mail Server page.
From the list in the Outgoing mail server (SMTP) box, select Deprovisioning Notification Distribution—the e-mail configuration you created in Step 1. Then, click Next to display the Enforce Policy page.
Add the Active Directory folder to the list on the Enforce Policy page:
Click Next, and then click Finish to close the wizard.
You can also use the Enforce Policy command on the Active Directory folder in the console tree to apply the policy to that folder. For more information on how to apply a Policy Object, see Applying Policy Objects and Managing policy scope earlier in this chapter.