Safeguard Authentication Services 4.1.5 - ActiveRoles Integration Pack Release Notes

De-provisioning Unix Users

You can automatically disable Unix accounts when users are de-provisioned in ActiveRoles Server.

To de-provision Unix users

1. From the ActiveRoles Server Console, navigate to Configuration | Policies | Administration.
2. From the Action menu, select New | Deprovisioning Policy.
3. When the New Deprovisioning Policy Object Wizard starts, click Next.
4. On the Name and Description page, enter Disable Unix accounts for deprovisioned users in the Name box and click Next.
5. On the Policy to Configure page, locate the Authentication Services Integration Pack and select the Deprovision Unix User policy type and click Next.
6. On the Policy Parameters page, select the UnixDisable parameter and click Edit.
7. On the Edit Parameter page, open the Value: drop-down menu, select True and click OK.
8. On the Policy Parameters page, select the PrimaryGidNumber parameter and click Edit.
9. On the Edit Parameter page, specify an integer value for the Primary GID number and click OK.
10. On the Policy Parameters page, click Next.
11. On the Enforce Policy page, click the Add button.
12. On the Select Objects page, click Browse, select Active Directory (to apply this policy to all new users), and click OK.
13. On the Select Objects page, select the Active Directory item at the top of the list, click Add and then click OK.
14. On the Enforce Policy page, click Next.
15. Click Finish to create the new policy object and close the wizard.

    When you de-provision a user account, the Integration Pack automatically disables the user's Unix attributes.