SharePoint User Group UK

In Sharepoint, you can import users from the active directory - I believe this to be a one way 'pull' into Sharepoint..i.e. there is no traffic back into Active Directory?
One of our IT guys is worried about it affecting / corrupting the AD..are there any issues here?

Having scheduled a daily import..If a user is deleted from the AD is this reconciled in Sharepoint as part of the import/update? I.e. The User no longer exists in Sharepoint either or is this to manitained more manually?

Thanks

Hi Guy,

<< I believe this to be a one way 'pull' into Sharepoint..i.e. there is no traffic back into Active Directory>>

Correct, that is by design.

<<If a user is deleted from the AD is this reconciled in Sharepoint as part of the import/update>>

Depends on the version, in 2003 the profile data in SharePoint will remain but will appear on the Missing from import view if the user data in AD is missing for 3 full profile imports. You can either delete the profile manually or script it.

In MOSS 2007 there is a MySiteCleanUpJob to delete stale user profiles and MySites.

cheers,

Colin Byrne

Hello Colin:

I definitely agree with you on the one way pull from AD and the "missing from import" view after 3 full profile imports.  I lost a lot of hair trying to troubleshoot a SharePoint search related issue where deleted AD accounts were still showing up in SharePoint people searches.

I am glad to hear that there is a MySiteCleanUpJob in MOSS 2007 (we are about to upgrade soon); however, do you know of a Microsoft fix for version 2003 that would automatically do this as well (as opposed to manually deleting profiles from SharePoint).  There is a cool script for doing this in v.2003 at http://sharepointinsight.com/blog/Lists/Posts/Post.aspx?ID=3.

Thanks,

Shola Salako.

Hi All,

I have Sharepoint Services 3 installed but when i add a user i can add a user using the login name but this does not pull across the users email details it seems to only pull across the users ad login name.

The user then needs to login to sharepoint and update there profile by populating there e-mail details.

I am sure this should not be the case. Also if i try  and add a user from within sharepoint to the site using the browse function it does not find anyone from Active Directory or the address book it seems to only find users all ready added to the site.

It seem like an account issue but i am not quite sure what account i should be looking at and what permission it should have to pull these deails across into Sharepoint services.

Any help would be much appreciated.

Many thanks

Bob

Hi,

Have you checked the user profile settings? Specifically the mapping between the AD properties and the profiles properties. I've seen many a case in the past where the AD email field was left blank and the (m)otherEmailAddress property used. If in doubt, do a google for ADSI Edit which is a utility that will allow you to view and edit the AD.

Typically, so long as you have set the profile import up and scheduled it properly, these things don;t need a great deal of permisson settings.

Cheers,

Paul.

Hi,

If you use a script or manually delete "retired" AD accounts from the Profile database, will this end up causing breaks in information??  For example, if the owner of a site is retired in AD, and removed from the Profile database, who will be listed as the owner of the site - and what will happen when you click their name?