Specifies the number of dormant days
Specifies the designated date for dormant accounts. This field is enabled when the Use Calculated Date? is unchecked. Click the calendar icon to select a date.
Specifies that the user can supply a dataset variable that contains a date value in the Calculated Date field.
Specifies the calculated date for dormant accounts. This field is enabled when the Use Calculated Date? is checked.
Select this field when retrieving dormant accounts from Active Directory 2003/2008 (NOT Active Directory 2000).
The LastLogonTimeStamp attribute contains the last logon date of a user; but it is replicated across all Domain controllers only after a period of time defined in the msDS-LogonTimeSyncInterval attribute of the Active Directory.
If the dormant date falls before "today's date - msDS-LogonTimeSyncInterval", then using the lastLogonTimestamp retrieved from a single Domain controller retrieves all the dormant accounts.
The msDS-LogonTimeSyncInterval attribute specifies the frequency (in days) with which the last logon time for a user/computer, recorded in the lastLogonTimestamp attribute, is replicated to all Domain Controllers in a Domain.
When using LastLogonTimeStamp, CA Process Automation retrieves the LastLogonTimeStamp information for each user from only one Domain controller and uses it to determine if the user is dormant or not.
Select this field when retrieving dormant accounts from Active Directory 2000, 2003, and 2008.
The LastLogon attribute contains the last logon date of a user but it is NOT replicated across all domain controllers.
In this case, CA Process Automation begins to retrieve the list of all domain controllers, then review them to save the most recent lastLogon attribute value for each user. Finally, the most recent lastLogon value for each user is used to determine the dormant accounts.
|
Copyright © 2014 CA.
All rights reserved.
|
|