You are viewing limited content. For full access, please sign in.

Question

Question

What is the difference between inactivating a user's account and deleting the user account from a company's Laserfiche repository?

asked on April 29, 2014

 If a user is deleted from the repository when they leave the company does that delete all traces of their activity within Laserfiche verses making them inactive? Would changing them to inactive still allow for the company to search for the user's document creation? Or is it possible to trace past activity regardless whether they are deleted or changed to inactive?

0 0

Answer

SELECTED ANSWER
replied on April 29, 2014

Deactivating an account makes it impossible for them to log in, but deleting the account removes their user name, password, attributes, group membership, rights, and permissions (to the extent that you've used these repository features vs. using a directory service).

 

Any audit data will still contain records of their activity.

1 0

Replies

replied on April 29, 2014

Note that some (not all) data will convert to GUIDs if users are deleted. I generally recommend disabling rather than deleting for this reason.

0 0
replied on April 29, 2014

Does that include data recorded by Audit Trail? I know that the list of users in the admin console will show the SID. I could be wrong, but I seem to recall that permissions might show the SID as well for entries where an account has been explicitly added. That's a reason why I'd recommend only using groups to apply security, whether in Laserfiche or AD.

0 0
replied on April 29, 2014

In the audit log, the name of the user who performed the action is recorded and so this won't be lost.  There are cases where one of the recorded properties is a SID and the corresponding name is not recorded (I think you're right that ACLs are one such situation).  In these cases, Audit Trail will attempt to decode the SID by querying either the domain or the Laserfiche server (depending on the type of SID).  If the user has been deleted from either user store, this will fail.

1 0
You are not allowed to follow up in this post.

Sign in to reply to this post.