Hello,

I am doing a clean-up of users in Remedy. Is there any way to check AD for disabled users using a vendor-form?

As far as I have figured out it is the "userAccountControl" that keeps the data about if the account is disabled or not.. But what is the value of an disabled account?

thanks in advance for any respons

br
hans m.

Go to your vendor form properties and set the ldap query like this

ldap://<hostname>/<fully qualified domain name>??sub?(&(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))

The disabled value is 2. You need the function "1.2.840.113556.1.4.803:=2" to check if the added values contain 2 or not.

This is a Microsoft AD function. Do some searches on your favorite search engine for more details.