Tell me more ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.
up vote 1 down vote favorite
1

Can anyone confirm for me that the User Profile to SharePoint Full Synchronization timer job must run in order to remove ophan ad users from a site collection? From my understanding this will remove the record from the profile database and then remove the user from the site collection's userinfo table.

share|improve this question

1 Answer

up vote 2 down vote

A full synchronization is not needed to remove the entries from the User Profile database only a incremental followed by My Site Cleanup. See Account Deletion and SharePoint 2010 User Profile Synchronization

But this will not remove users from the Site collections userinfo table, there is no automatic deletion happening here. If you want to do the clean up you can use Clean-up User Information List

share|improve this answer
You're telling me SharePoint did not include a timer job to remove oprhan AD users in a site collection? I was thinking of writing a powershell script to the clean up on the user information lists on my site collections, but I just find that hard to believe. – Brandon Michael Hunter Jun 1 '12 at 21:23
1  
Yes, SharePoint the Userlist is part of SharePoint Foundation which has no expectation about access to AD and don't like the idea of users disappearing as all user columns like Created By and Modified By are lookups into this list. – Per Jakobsen Jun 2 '12 at 18:51
That's a good point.!I guess my next question is what are people doing with these orphan ad users that lives inside of their user info tables? – Brandon Michael Hunter Jun 3 '12 at 13:17
Any information related to a user object is stored in a reference to the entry of the user info table. If a user uploads a document (or any list item) the information of the user who created the entry is stored not ith the AD SAM Account information (company\johndoe) but with an integer coming from this list. So if you delete the entry rom the user info list these information will be corrupted. This list is needed for performance reasons. If sharepoint would look up every entry in AD this will ruin performance (if not already bad ;-) ). Just don't mess with this list. – Marco Scheel Aug 13 '12 at 13:03

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.