Removing disabled users from k1000?
I'm looking for information on how everyone is removing disabled users who were termed and originally automatically imported through LDAP from the kace applicance. Kace support says the only way to do this is by deleting all users, and then re-importing all current users through LDAP again.
This can't be the only way!
I've seen multiple requests (starting from at least 2011) asking for an automated feature to remove disabled users but can't find any info on if this was added in or not. I thought you could create smart labels for users who were disabled, and then manually clean it out one a month or so, but can't figure out how to create the labels (not an option in label creation). We have 10,000 user records, and only 2,000 current employees, so we'd like to clean up the database.
We are running k1000 version 6.4 currently.
1 Comment
[ + ] Show comment
-
Agreed! We've managed to accumulate over 10,000 users in our k1000, because there is no automated clean up of users that are no longer in LDAP. Received the same response from a support rep, advised him that this does not work, especially when you are talking about removing active users, with active tickets. - brad.pickett 7 years ago
Answers (3)
Please log in to answer
Posted by:
JasonEgg
7 years ago
Keep in mind that when you remove users their information is completely removed from Service Desk tickets. I.E. if user1 is the owner and user2 is the submitter in a ticket and both users are deleted, then the ticket will be blank for both owner and submitter. This is the reason we are not pruning users, even though there are 13,000 on the box.
If you still wish to do it, and don't want to do it the advised way, you'll have to use the "dark magic" of Custom Ticket Rules to explicitly drop columns from the USER table. However, I'm not even sure that will work.
Comments:
-
I understand that the ticket owners would have issues if we just started deleting them, which is why we are archiving tickets first. We are looking to delete users who are currently not associated with any non archived tickets as the next step. According to the Dell rep we spoke to, the ONLY CURRENT WAY to prune users is to delete *all* users from the k1000, then re-import users through LDAP which we are not going to do as for the reasons we've already said.
I was hoping someone had come up with a work around such as a disabled users smart label, but I've had no luck with this issue. - PBAWAC 7 years ago
Posted by:
AndrewQ
7 years ago
I also have a LDAP label pulling my users in. What we do is remove all the User labels in KACE for the person leaving. In Active Directory I move the individual's account from the Users container to Disabled Users. Then they don't get picked up in the LDAP anymore.
Comments:
-
We also move them to disabled in AD and remove access in the kace system, but there needs to be an easy way to remove disabled accounts from the k1000. I feel its silly that you can easily import, but cannot modify or delete without doing so one user at a time. - PBAWAC 7 years ago
Posted by:
JasonEgg
7 years ago
Here's a query which will get you all users who are not associated with any tickets:
SELECT DISTINCT U.ID
FROM `USER` U
WHERE U.ID NOT IN
(SELECT DISTINCT U.ID
FROM `USER` U
INNER JOIN HD_TICKET H1 ON H1.OWNER_ID = U.ID)
AND U.ID NOT IN
(SELECT DISTINCT U.ID
FROM `USER` U
INNER JOIN HD_TICKET H2 ON H2.SUBMITTER_ID = U.ID)
From there you could create a label, then use the user view to delete them. Not ideal, I know, but my only other idea is a Custom Ticket Rule with manual DROP... which is dangerous so I don't advise it. If you have a test environment, you could try the CTR there.
