Skip to main content
Solved

What will happen if I delete a user on AD?

  • July 23, 2019
  • 5 replies
  • 43 views

Forum|alt.badge.img+7

Noob question

Hello, we have LDAP integration in our Jamf instance. If I delete a user in AD assuming that there's paid apps/configurations scoped out to this user. Will this un-scope everything assigned to the said user?

Thanks

Best answer by diradmin

@Krbonus When assets in Jamf Pro are assigned to LDAP users, a corresponding user_object is created in the database. This object is completely separate and independent of the originating LDAP object. If you delete the user in LDAP, Jamf Pro does nothing to sync these objects. Therefore, the user_object must be deleted from Jamf Pro as well (after un-assigning assets).

5 replies

Forum|alt.badge.img+7
  • Contributor
  • July 24, 2019

It should unstop it yes, as Jamf will no longer know of that user so it would therefore not be able to consider it within scope.


Forum|alt.badge.img+8
  • Valued Contributor
  • July 24, 2019

@Krbonus Deleting the user in AD directly will not remove the user_object in Jamf Pro.


Forum|alt.badge.img+7
  • Author
  • Contributor
  • July 24, 2019

@awginger @diradmin I'm confused. Both of you made sense. honestly..


Forum|alt.badge.img+8
  • Valued Contributor
  • Answer
  • July 24, 2019

@Krbonus When assets in Jamf Pro are assigned to LDAP users, a corresponding user_object is created in the database. This object is completely separate and independent of the originating LDAP object. If you delete the user in LDAP, Jamf Pro does nothing to sync these objects. Therefore, the user_object must be deleted from Jamf Pro as well (after un-assigning assets).


Forum|alt.badge.img+7
  • Author
  • Contributor
  • July 24, 2019

Thank you kind sir! @diradmin