0

In my environment there is UPSA, Active Directory connection created and profiles already imported. When I deleted one of imported account in Active Directory and run UPA Full Sync the account was not removed from SharePoint profiles - which is expected behaviour! The problem is that the account is not being marked to be deleted. I checked 'UserProfle_Full' table in UPSA db and recognized that 'bdeleted' did not change to 1.

enter image description here

The good is that 'IsImported' has changed from 1 to 0 but why 'bDeleted' remained on 0?

I tried also just disable account in AD and the result was the same (I use LDAP filter (&(objectCategory=person)(objectClass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2)) in UPA Sync connection and I'm sure it works correctly).

My farm version - 16.0.4600.1001 (October 2017 CU installed)

Has anybody faced this problem or can advise how to troubleshoot it?

1 Answer 1

0

User Profiles using AD Import are never removed automatically. Instead, run the following.

$proxy = Get-SPServiceApplicationProxy | ?{$_.TypeName -match 'profile'}
Set-SPProfileServiceApplication $proxy -PurgeNonImportedObjects:$true

If you want the previous behavior of the UPSS, implement MIM.

2
  • Hi Trevor, Thank you for reply. I'd like to use functionality of the 'Mysite cleanup job' and as I know the action is taken when 'bdeleted = 1'. Should it be still the case in SP2016 that if Full Sync does not "see" an account in Active Directory any more, bdeleted is setting to 1?
    – Przlwo
    Nov 8, 2017 at 16:51
  • AD Import has never removed profiles. If you need to leverage the My Site cleanup job and do not want to rely on running the above PowerShell, then you need to implement Microsoft Identity Manager.
    – user6024
    Nov 8, 2017 at 16:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.