Enabling/Disabling Domain Users Accounts or Resetting Domain User Passwords

When the Discovery > Users and Portal Access page is used to enable or disable a domain user account or reset a domain user's password, synchronization occurs immediately for only that domain user record. Detailed domain data is harvested for only that domain user.

• A disabled domain user will no longer be able to logon using the domain credential, nor be able to logon to the VSA using their domain credential.
• Password changes take effect the next time the domain user logs on, to both the domain and to the VSA using their domain credential.

NOTE   Enabling/disabling domain user accounts or resetting domain user passwords in Active Directory will not update the VSA until a read time synchronization occurs.

NOTE   Do not make changes to the password of a Discovery managed user or enable/disable that user using the System > Users page or System > Change Logon page. These changes only occur in the VSA and only have a temporary effect on that user. Eventually synchronization will reset the user's VSA password and enable/disable the VSA user as specified in Active Directory.

NOTE   Active Directory passwords used to authenticate to VSA must conform to the VSA password requirements described described in System > Server Management > Logon Policy.