A user isn't deleted from the 'DE: Users' query even though the user is disabled in LDAP Server

Technical Articles ID: KB78571
Last Modified: 2023-04-28 11:53:02 Etc/GMT

Environment

Drive Encryption (DE) 7.x

For details of DE 7.x supported environments, see KB79422 - Supported platforms for Drive Encryption 7.x.

Problem

The 'DE: Users' query continues to show users that have been deleted on the client when both the following conditions are met:

The user is disabled in Active Directory.
The Endpoint Encryption Server Setting 'If user is disabled in LDAP Server' is set to Delete.

Users aren't expected to be reported in the 'DE: Users' query if they're disabled in Active Directory and not available in the DE client preboot environment.

Solution

This behavior is expected. When the DE server setting 'If user is disabled in LDAP Server' is set to delete and an existing user is disabled in the Active Directory, the user is deleted from the client system. But, the user assignment in ePolicy Orchestrator remains, so the user is viewable in the DE: Users query.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

A user isn't deleted from the 'DE: Users' query even though the user is disabled in LDAP Server

Environment

Problem

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

A user isn't deleted from the 'DE: Users' query even though the user is disabled in LDAP Server

Environment

Problem

Solution

Affected Products

Languages:

Choose your region

Title

Title