How suspend functionality works after the upgrade to 10.3

Content: 

Overview

Starting from the 10.3 version, Suspend Tool has been migrated to Administrator Service with significantly improved functionality. For details, please see the following article: New Suspend Configuration.

After upgrading to version 10.3.0, the legacy suspend functionality continues to work due to the implemented coexistence of the old and new suspend features. Existing automation rules and web actions will still use the legacy Suspend policies. However, new suspend automation rules will fail with an error if the Use Modern Suspend Rules and Configurations setting in the Active Directory extension is set to No.

Review the following for additional information:

• New automation rules
• Active Directory extension settings

Switching to the modern Suspend is optional. However, if you switch, you must redo your rules and configurations to align with the new functionality.
After upgrading the Suspend Tool, a banner will appear in Active Directory Users and Computers (ADUC) indicating that the Suspend application is a legacy product that will no longer receive updates or support. You can continue using this legacy suspend application, but for fully supported and enhanced suspend functionality, please use the suspend rules within Cayosoft Administrator.

Video Tutorial

In this video, you will learn what steps should be performed before using the New Suspend functionality.

Scenario: Upgrade

After the upgrade, the Use Modern Suspend Rules and Configurations extension in Active Directory is set to No by default.

1. Legacy Suspend rules configured in the previous versions continue to work.
2. Modern Suspend rules fail with the error.
3. Web actions for Suspend and Undo Suspend use the legacy Suspend path.
4. The new Process scheduled suspend operations rule is not scheduled.
5. Default suspend configurations are created but not used:
   • AD User Suspend
   • AD User Undo Suspend
   • AD User Terminate
   • AD Group Suspend
   • AD Computer Suspend (New functionality) 
   • Microsoft 365 User Suspend 
   • Microsoft 365 User Undo Suspend.
6. Upgraded ADUC Suspend tool with new banners.

As a result, Suspend works entirely as it did without interruption. You cannot suspend users, groups, and computers using the new modern flow. 

Scenario: Switchover to Modern Suspend after the upgrade

If the Use Modern Suspend Rules and Configurations setting in the Active Directory extension is manually set to Yes:

1. Legacy Suspend rules, except for object retention and Suspend reporting rules, will stop working and fail with errors.
2. New Suspend rules will work without errors.
3. Web actions for Suspend and Undo now follow the new Suspend path.
4. The Process Scheduled Suspend Operations rule is scheduled for daily execution.
5. Web actions are now linked to new default Suspend configurations and utilize them for suspending.
6. Scheduled suspends performed using the legacy Suspend feature are no longer processed, but they can still be viewed via the legacy reports. To process these, they should be re-suspended manually using the new Suspend functionality.
7. Undo Suspend still works for both old and new objects, depending on the method used for suspension.
8. The Web UI displays the status of suspended objects for both legacy and modern Suspend methods.

As a result, you will suspend users, groups, and computers using the new Suspend flow. Undo Suspend continues to function for both old and new objects.

Scenario: New Installation

1. After the upgrade in the Active Directory extension 'Use Modern Suspend Rules and Configurations' is set to 'Yes' by default.
2. If you create legacy Suspend rules they will fail with errors.
3. New Suspend rules work correctly
4. Web actions for Suspend and Undo Suspend use the modern configurations
5. Process scheduled suspend operations rule is scheduled to run once daily by default.
6. The following default Suspend configurations are created:
   • AD User Suspend
   • AD User Undo Suspend
   • AD User Terminate
   • AD Group Suspend
   • AD Computer Suspend (New functionality)
   • Microsoft 365 User Suspend
   • Microsoft 365 User Undo Suspend.
7. Web actions are tied to default Suspend configurations.

As a result, you suspend users, groups, and computers using the modern Suspend flow.

Suspend Rules and Actions After the Upgrade

After upgrading, all legacy rules are renamed with a "(Legacy)" suffix.

Replacement of old suspend rules with new rules

Change History