Profile Synchronization configuration options

Article:HOWTO58590  |  Created: 2011-08-01  |  Updated: 2013-07-12  |  Article URL http://www.symantec.com/docs/HOWTO58590
Article Type
How To


Subject


Profile Synchronization configuration options

Use these settings to control how Compliance Accelerator synchronizes employee profiles with the corresponding Active Directory or Domino directory accounts.

Automatically detect deleted profiles and mark them as deactivated

Specifies whether Compliance Accelerator should automatically deactivate those employee profiles for which it cannot find a corresponding Active Directory or Domino directory account. Deactivating a profile removes all permissions, group memberships, and department memberships from it.

Default Domino domain when creating profiles

Specifies a domain to add to a user name automatically when synchronizing employees with Domino accounts.

Default Domino server when browsing for users

Specifies the name of the default Domino LDAP server to use when you browse for new users to add to your Compliance Accelerator system.

Force users to use the default Domino server when browsing for users

Stops you from choosing any Domino LDAP server other than the default server when you browse for new users to your Compliance Accelerator system. By default, Compliance Accelerator lets you nominate any Domino server.

Minimum days to wait before profiles are deactivated

Specifies the number of days after which Compliance Accelerator should automatically deactivate those employee profiles for which it cannot find a matching Active Directory or Domino directory account.

Minimum number of failed synchronizations before deactivating profiles

Specifies the number of times that Compliance Accelerator should fail to synchronize an employee profile with the corresponding Active Directory or Domino directory account before it deactivates the profile.

Number of synchronization threads

Specifies the number of threads that Compliance Accelerator employs when it synchronizes employee profiles with the corresponding Active Directory or Domino directory accounts. Enter a value in the range 1 through 5, where the default is 1.

Remove addresses that do not exist in Domino or Active Directory

Specifies whether Compliance Accelerator deletes the email addresses in an employee profile before it synchronizes the profile with Active Directory or a Domino directory. By default, Compliance Accelerator does not delete the addresses. This is because you may still want to perform searches that use old email addresses, or you may have entered some additional email addresses manually.

Compliance Accelerator does not delete the email addresses in the profile if synchronization fails for any reason.

Synchronization interval (hours)

Specifies the frequency in hours with which Compliance Accelerator synchronizes employee profiles with the corresponding Active Directory or Domino directory accounts. Enter a value in the range 1 through 24. The default is every eight hours and every time the Accelerator Manager service starts.

Synchronize profiles

Specifies whether Compliance Accelerator should attempt to synchronize employees and groups with the corresponding Active Directory or Domino directory accounts. The default is to do so.

When service starts wait before synchronizing (minutes)

Specifies the number of minutes to wait after the Accelerator Manager service starts before synchronizing employees and groups with Active Directory or a Domino directory. Enter a value in the range 0 through 720. By default, the service does not wait before synchronizing.

See Setting Compliance Accelerator system configuration options


Legacy ID



v7479355_v41328187


Article URL http://www.symantec.com/docs/HOWTO58590


Terms of use for this information are found in Legal Notices