User Name Synchronization in the Metasys System - Metasys - LIT-1201528 - General System Information - Metasys System - 10.1

To ensure current Active Directory service user information appears in the Security Administrator system, an automatic synchronization process is provided. You initiate this process whenever you click a user’s name in the Active Directory folder. Any changes to the user’s account recorded in that user’s properties are refreshed. If you cannot read a particular user property from Active Directory services or if the Metasys system cannot successfully use the service account for Active Directory services (for example, if the specified service account password is invalid), a question mark icon () appears to the left of the property’s name. Any property value shown reflects its value the last time it was successfully synchronized with Active Directory service.

If an Active Directory service attribute shows no value in the Security Administrator system, make sure the attribute has a value on the Active Directory service domain server. Such attributes include Active Directory Description, Phone Number, Full Name, and E-mail. The synchronization process cannot determine whether a particular attribute is unspecified or cannot be read from the Active Directory service domain server.

If you delete an Active Directory service user from Active Directory service, the account becomes disabled within the Metasys system, the user’s properties and privileges within the Metasys SMP UI become read-only, and the Metasys Access Suspended property is enabled. A small red X appears next to that user’s icon in the Active Directory Users list (Figure 2). See Table 1 for the icons used to indicate the current Active Directory service and Metasys access status for a user.

An Active Directory service user is also marked as deleted if the synchronization process fails to return any attributes for the user. The synchronization process cannot determine the cause of this behavior. Once the error condition is resolved, the user is re-enabled in the Metasys system the next time the user is synchronized.

When a user is removed from Active Directory service, the Metasys system continues to store privileges for a user until a Metasys administrator manually removes the user from the Metasys system.