Active Directory Resync schedule does not remove unmanaged computers deleted from AD.

Article Id: 170723
Status: Published
Updated On: 03-01-2018 09:12
Legacy Id: TECH248533
Products:
Management Platform (Formerly known as Notification Server)
Issue/Introduction:

Active Directory Resync schedule does not remove unmanaged computers deleted from AD.

Cause:

In ITMS 8.1 RU4 by default computers are deleted 7 days after removal from AD.
 

Resolution:

To delete computers immediately after resync;

  1. Edit the "C:\ProgramData\Symantec\SMP\Settings\CoreSettings.config".
  2. Set the ADResyncDeleteResourcesThresholdDays set to "0".
  3. Make sure the AD import rules are Enabled (marked as green) and have a future schedule.
  4. After that run the "NS.Directory Resync Update Schedule Item" scheduled task on the SMP Server.
     

Note: When ‘Delete’ action is enabled, we check out when affected resources were last imported by AD Import rules and only perform deletion to these, which are older than timespan defined by days in this setting. Computer deleted immediately if this setting set to 0.