This scenario describes how to configure the following policy to monitor deprovisioning operations in all domains registered with Active Roles (managed domains):
-
When a deprovisioning operation is completed, verify if any errors occurred during the operation.
-
If any errors occurred, send the report on the deprovisioning results to the administrator.
To implement this scenario, you must perform the following actions:
-
Create the appropriate email configuration.
-
Create, configure, and apply the Policy Object that defines the appropriate policy.
As a result, upon completion of a deprovisioning operation in any managed domain, the administrator receives a report in the event of any error during that operation. The message subject includes the name of the object that has been deprovisioned.
The following two sections elaborate on the steps to implement this scenario.
You can use the instructions in see Scenario: Sending deprovisioning notification to create the email configuration. When prompted to specify a name for the new configuration, type Deprovisioning Report Distribution.
You can create, configure, and apply the Policy Object you need by using the New Deprovisioning Policy Object Wizard.
To configure the policy, click Report Distribution on the Select Policy Type page of the wizard. Then, click Next.
On the Report Recipients and Message page, click the button next to the Report recipients box to display the Deprovisioning Report Recipients dialog. In that dialog, type the administrator’s email address, such as administrator@mydomain.com, and then click OK.
Then, customize the message subject as necessary. For example, you might enter the following subject: Deprovisioning of %<objectClass> ’%<name>’ Completed with Errors. Verify that the Send out the report only if any errors occur check box is selected and then click Next to display the Outgoing Mail Server page.
From the list in the Outgoing mail server (SMTP) box, select Deprovisioning Report Distribution—the email configuration you have created in Step 1, and then click Next to display the Enforce Policy page.
On the Enforce Policy page, click Add and select the Active Directory folder to add to the list. Click Next, and then click Finish to close the wizard.
You can also use the Enforce Policy command on the Active Directory folder in the Console tree to apply the policy to that folder.
For more information on how to apply a Policy Object, see Linking Policy Objects to directory objects.
To configure or edit an entry in the Add Entry dialog, follow the instructions in these procedures.
NOTE: Consider the following when configuring entries:
