User account settings

Question

Hello,

I'm looking for a solution to automatically deactivate a user account after a date (at the end of an employee's employment contract for example)
Thank you

Craig Hawker · Accepted Answer

As Timo Lahti said: the general approach here would typically be to use AD-linked accounts, and drive everything from that. 
 If you are using objects in the vault to programmatically create user accounts, then it would be possible to also programmatically update those accounts to remove their licence, for example. 
 The object I linked to above requires a separate connection to the vault, so you would not easily be able to use it within VBScript or the VAF (as the vault reference you get cannot do it), but it could be controlled by an external application which were run every day at 1am, for example. 
 I do not have a specific code sample that does this, though.

Timo Lahti · Answer

If you're using windows authentication, then there could be this done by disabling the AD account of the user. 
 I think that's how it's usually done.

Timo Lahti · Answer

I think you're out of luck here. 
 If the user account is at some AD group that is synced to M-Files, the account gets disabled in M-Files when the AD account is removed from all of such AD groups that are synced. 
 But as said, if the AD account is not used for controlling the login, what kind of mechanism you're looking after - how would the information about ended employment end up so that the login account would be disabled?

User account settings

Top Replies