Support Center

SIFWorks Directory Manager FAQ

Last Updated: Jul 01, 2014 02:32PM MDT

SIFWorks Directory Manager (SDM) FAQ

Common questions regarding the SIFWorks Directory Manager Agent

  1. How can I best manage old Active Directory (AD) accounts?
  2. How can I best manage the previous years security groups for all accounts in AD?
  3. How can I manage old home directories?
  4. How can I manage old accounts in Google Apps?
  5. How can I reset all student passwords in AD?

 

Q. How can I best manage Active Directory (AD) Accounts for graduated/transferred out students?

A. Delete all accounts that were created by the SDM Agent and run a sync.

The SDM Agent was designed to populate accounts using the information it receives from your Student Information System (SIS). The easiest way to clean up old accounts in AD is to delete all of the accounts that will be recreated by the SDM Agent and run a sync.

This will pull over all of the current information from your SIS and recreate all of the accounts that have a current enrollment.

A. Disable all accounts that will be updated by the SDM Agent, run a sync, then move/delete all disabled account.

If deleting accounts is not desired, disabling all of the accounts that are maintained by the SDM agent will be the next step. When a sync is ran the SDM agent will enable all accounts in AD who have an active enrollment. All accounts that remained disabled did not have an active enrollment which means they either graduated, left the district, or there is an issue with New Year Rollover Settings. In the case of New Year Rollover Settings please refer to the SDM Rollover guide.‚Äč

↵ Top


 

Q. How can I best manage the previous years security groups for accounts in AD?

A. There is a setting in the Directory Template Wizard that states "Remove and reassign groups not assigned by this agent".

To find this setting

  • Click File > Agent Settings...
  • Select Directory Template in the left column. > Click Run Template Wizard...
  • Click Next until you are on the page labeled Student Security Group Settings.
  • Check the box that states “Remove and reassign groups not assigned by this agent”
  • Once that option is selected keep hitting next until the wizard is completed.

With this option selected only Security groups that the SDM agent is configured to add will be applied to each student.

**Note**

This will remove all security groups that were added manually in AD.

↵ Top

Q. How can I manage home directories for graduated/transferred out students?

A. Delete all home folders and let the SDM Agent recreate them.

If you do not wish to keep the files stored in the students home directory, the best way to manage these directories will be to delete all home directories and let the agent recreate them next time the agent is synced.

A. Run a sync to allow the home directories update then delete the home directories based off of the date modified. 

If you are looking to keep the files that have been saved in the home directories for the students the best way to manage the home directories will be to run a sync allowing the SDM Agent to move the student's home directory to their new folder then go back and take a look at the date modified on these folders and remove the folders with a modified data lower than your sync time.

**Note**

Because the SDM Agent does not actually move the home directory folder but create a new folder then move the contents to the new folder this method will not work for students whos home folders do not move. I can see this being a problem for repeating students or if you have the folder structure set up in such a way where students do not move year over year.

↵ Top

 

Q. How can I manage users in Google Apps who have graduated or left the district?

A. Delete all accounts that were created by the SDM Agent and run a sync.

The SDM Agent was designed to populate accounts using the information it receives from your Student Information System (SIS). The easiest way to clean up old accounts in Google Apps is to delete all of the accounts that will be recreated by the SDM Agent and run a sync.

A. Disable all accounts that will be updated by the SDM Agent, run a sync, then move/delete all disabled account.

If deleting accounts is not desired, disabling all of the accounts that are maintained by the SDM agent will be the next step. When a sync is ran the SDM agent will enable all accounts in Google Apps for all accounts who have an active enrollment. All accounts that remained disabled did not have an active enrollment which means they either graduated, left the district, or there is an issue with New Year Rollover Settings. In the case of New Year Rollover Settings please refer to the SDM Rollover guide. 

↵ Top

 

Q. How can I reset all student passwords in AD using the SDM Agent?

A. In the credentials plugin you can set up a password expression that by default will be applied to all new students. If you want this to apply to existing students enable the Edit and re-synchronizations checkbox under the options tab. 

This can only be accomplished if you use the credentials plugin.

You can find the credentials plugin by

  • Clicking File > Agent Settings…
  • Expand out Plugins in the left window
  • Expand out Credentials > Click on the settings that you would like to change.

Here you will be able to set up a username and password expression that will be used when creating accounts in AD. If you would like this plugin to be ran for existing students click on the options tab and select Edit and re-synchronizations. This will cause this plugin to be called for every student.

 **Note**

If you have the username expression checked in the credentials plugin this will also apply that expression to all users. If the username is unchecked the credentials plugin will default back to the directory template to get a username expression. 

↵ Top
support@kimonocloud.com
http://assets3.desk.com/
false
desk
Loading
seconds ago
a minute ago
minutes ago
an hour ago
hours ago
a day ago
days ago
about
false
Invalid characters found
/customer/en/portal/articles/autocomplete