Connector Guides › Connectors Guide › Connecting to Endpoints › Microsoft Active Directory Services Connector › Connector-Specific Features › New ADS Accounts › Relocate Accounts

Relocate Accounts

Using the Relocate Accounts function in the Provisioning Manager, you can specify that an account belonging to a account template be moved to the container that is specified by the container rule within the account template. You can also request that all accounts belonging to an account template be moved to their respective containers.

In ADS, the container rule selects a container based on global user attribute values that allow one account template to prescribe different containers for different accounts. The Relocate Accounts function re-evaluates the rule using current global user attribute values and moves each account to the prescribed container.

For accounts, a list of assigned account templates for the account is retrieved and if there is only one account template, an LDAP operation for the account is issued using that account template value. If there is more than one account template assigned to an account, a list of account templates to choose from is retrieved. If there are no account templates assigned to the account, an error message is displayed.

For account templates, child Relocate Accounts operations on each account currently assigned to the account template are initiated. These child operations can succeed or fail individually and the completion message for the account template Relocate Accounts operations contains statistics for the following categories:

• Updated - Account moved to new container
• Unchanged - Account already in correct container
• Failure - Problem determining container or moving account

Relocate operations can also be executed with the Batch Utility (etautil).

• For Account Template:

  etautil -d <eTADomain> -u <eTAUser> p <password> update eTADSPolicyContainerName=Active Directory Policies,eTNamespaceName=CommonObjects,dc=<eTADomain> eTADSPPolicy eTADSPolicyName=<policyeName> to eTRelocateAccounts=1
  

• For Account:

  etautil -d <eTADomain> -u <eTAUser> p <password> update 'eTADSContainerName=Users,eTADSDirectoryName=<directoryName>,eTNamespaceName=ActiveDirectory' eTADSAccount eTADSAccountName=<accountName> to eTRelocateAccounts=1 eTSyncPolicyDN='eTADSPolicyName=<policyName>,eTADSPolicyContainerName=Active Directory Policies,eTNamespaceName=CommonObjects,dc=<eTADomain>'