This scenario describes how to configure a policy so that a certain Organizational Unit contains all the deprovisioned user accounts.
To implement this scenario, you must perform the following actions:
-
Create and configure the Policy Object that defines the appropriate policy.
-
Apply the Policy Object to a domain, OU, or Managed Unit.
As a result, after deprovisioning a user account in the container you selected in Step 2, Active Roles automatically moves that account to the Organizational Unit determined by the policy configuration. The following two sections elaborate on the steps to implement this scenario.
You can create and configure the Policy Object you need by using the New Deprovisioning Policy Object wizard.
To configure the policy, click User Account Permanent Deletion on the Select Policy Type page of the wizard. Then, click Next.
On the Deletion Options page, click Delete the object after retention period. Then, in the box beneath that option, type 90.
When you are done, click Next and follow the instructions in the wizard to create the Policy Object.
To apply the Policy Object:
-
Use the Enforce Policy page in the New Policy Object Wizard.
-
Alternatively, complete the New Policy Object Wizard, then use the Enforce Policy command on the domain, OU, or Managed Unit where you want to apply the policy.
For more information on how to apply a Policy Object, see Linking Policy Objects to directory objects.
Exchange Mailbox Deprovisioning policies automate the deprovisioning of Microsoft Exchange resources for deprovisioned users. When activated, the policy:
-
Hides deprovisioned users from address lists.
-
Prevents sending non-delivery reports.
-
Grants the designated persons full access to deprovisioned mailboxes.
-
Redirects email messages sent to deprovisioned users.
-
Forces the mailbox of the deprovisioned user to send automatic replies.
As such, the policy is meant to reduce the amount of email messages sent to the deprovisioned mailbox, and to authorize designated persons to monitor the mailbox of the deprovisioned user.
For a detailed description of this policy, see Concept: Exchange Mailbox Deprovisioning in the Active Roles Feature Guide.
