Enable and Disable Active Directory Users

Data Sync makes it very easy to set users as enabled or disabled in Active Directory, you just need to update the UserAccountControl attribute by passing a boolean value.

The video below shows the process you need to follow to set the Active Directory useraccountcontrol attribute to enable or disable your users. With Data Sync this takes less than a minute to get up and running.

You may be given a list of users that need to be either enabled or disabled in AD, for example this list might be in SharePoint, it might come from your HR system or it might be a document.

This needs to have a field with true or false values to say if the account is enabled or disabled.

To enable and disable users in Active Directory you need to connect to your list of users as your source, and connect to your Active Directory OU where your users are located as your target. Make sure to use the Active Directory V2 - Users/Contact/Groups/Computers connector.

Warning: Testing is a great way to make sure you know what is happening.

Please try this on test data before trying on your production OU. You do not want to disable all accounts by mistake!

Then simply map your source columns to their corresponding target columns. You need to map your disabled/enabled column to DS-UAC-Disabled, where True will disable the account and False will enable the account.

DS- columns are Data Sync attribute columns that handle the addition of that field for each user. In previous versions you would have needed to write Project Automation code to update the password field. Now Data Sync does it for you.

Your schema map might look similar to:

Now just run the compare and synchronise the changes. Your Active Directory Users will now be enabled or disabled depending on your data.