devaaron

programming, sharepoint, jQuery

Active Directory

Post navigation

User Profile Sync

Posted by devaaron

0

After struggling with this for a few days, we discovered an interesting problem when syncing users from Active Directory to SharePoint. Our disabled accounts, which are moved to a disabled OU (organizational unit) in Active Directory were not showing up in SharePoint, however disabled IT account were still visible. Our Active Directory structure looked something like this (this is a very simplified version):

Active Accounts
–HR
–Accounting
–Practice Groups

Disabled Accounts

IT
–Disabled IT
–Active IT

The accounts in the Disabled OU did not show up in SharePoint, but the Disabled IT accounts did. There is a simple explanation for this, per this technet article:

“There is currently no utility that allows you to select a parent OU while excluding any of its child OUs from synchronization.”

Because we were syncing the IT OU, it was syncing all of the children, both Disabled and Active. The solution was to move the Disabled IT directory out of the IT OU, so our new structure looks like this:

Disabled Accounts
Disabled IT

IT
–Active IT

Once this was done, we ran a Full sync of the User Profile Application Service but the disabled account still showed up in search. Why? We needed to run a Full Crawl of Local SharePoint Sites as well. Once that completed, the disabled IT accounts were gone.

Posted in SharePoint

Tagged Active Directory, SharePoint 2013, User Profile Service Application

Mar·31

Post navigation

Archives

February 2023
M T W T F S S
 12345
6789101112
13141516171819
20212223242526
2728  
« Feb    

Pages

  • About

Topics

jQuery Programming SharePoint SharePoint Online Uncategorized Web Development Workflow

Info

  • Register
  • Log in
  • Entries feed
  • Comments feed
  • WordPress.com
Create a free website or blog at WordPress.com.
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy
  • Follow Following
    • devaaron
    • Already have a WordPress.com account? Log in now.
    • devaaron
    • Customize
    • Follow Following
    • Sign up
    • Log in
    • Report this content
    • View site in Reader
    • Manage subscriptions
    • Collapse this bar