Thycotic Community Forum

8/26/2010 9:05:00 AM Jeremy A Posts: 61

Found what looks to be a bug with AD Sync feature Steps to replicate Sync SS with an AD domain security group. Add some accounts to the group and then sync the accounts. After the accounts are enabled, then deactivate the domain through SS Ad Sync -> Edit domains. Now, re-sync with AD. All the accounts in the disabled domain remain enabled. Now, if the domain no longer exists, they can't actually log into SS, however for licensing purposes it would be nice to not have to manually disable multiple accounts in SS if the whole domain is set to the Disabled flag within SS. -- http://www.ignitionmsp.com/

0 • link

---