Provisioning Reference Guide › Advanced Configuration Options › Domain Configuration › Password Synchronization Parameters › Update Only Global User

Update Only Global User

Values: No (default) or Yes

Description: This parameter controls what action is carried out when the Provisioning Server receives a password change notification. By default, the new endpoint account password received in a password change notification is used first to update the global user's password and then to update all of that global user's account passwords for accounts other than the one from which the notification arrived.

Set this parameter to Yes to change this behavior so that only the global user password is updated. No account passwords will then be updated.

There are various situations in which the global user and affected accounts are not updated, including the following:

• Global user Enable Password Synchronization Agent property is not enabled. Global Users and account passwords are not updated.
• Password change notification occurred during the Agent Response Threshold period and is treated as a false password change notification. Global Users and account passwords are not updated.
• An endpoint containing one of the global user's accounts is marked on its Endpoint Properties for Disable propagation to accounts. The accounts on this endpoint are not updated.
• Global user Restricted property is enabled. Restricted global users such as [default user] are protected from accidentally propagating changes to their associated accounts.