asked on June 7, 2022
So here a weird thing, I was wondering if i might get some input on. I have a client that have a lot of users in LFDS. Like 20000 licenses. Obviously this is all managed by active directory rules. They are running into an issue where their synchronizations are failing. The reason they are failing is due to a unique key error. The sync is trying to add users to LFDS that already exist in LFDS.
They have the settings to remove users that are removed from AD but.... their policy is not to remove but disable users for ~4 years before deleting because these employees frequently leave and come back and this is immutable.
When they disable the users the users/remove them from their respective group, licenses are revoked which is great but when they come back they cause the sync to fail and they only way to correct it is to manually delete them from LFDS and rerun the sync. If this was one or two people occasionally this wouldn't be an issue but with this many users and this being their big hiring time. It is untenable to manually figure out the hundred or so users who are causing the issue in the event viewer and then manually delete them all from LFDS.
Anyone out there who has figured out a solution to this?
Anyone out there who has figured out a solution to this?
1
0