How do I get Crowd to remove a user from an AD sync when the user is marked as disabled in AD?

Question

When users leave the company, or procedure is to disable their AD account, and 90 days later it gets deleted.  During those 90 days, Crowd is still synchronizing them as an active user into Jira, Confluence, Crucible, etc.  How can I get Crowd to recognize that it should not be importing inactive users?

Bruno Vincent · Answer

Hi David,

You have to change the "User object filter" in the Configuration tab of your Active Directory in the Crowd console:

(&(&(&(objectCategory=Person)(sAMAccountName=*))(!(userAccountControl=514)))(!(userAccountControl=66050)))

(Don't forget to click synchronise afterwards)

Regards,

Bruno