Articles in this section

Print

Configuration of scheduled suspend and undo suspend rules

  • Updated
Follow

Content: 

Overview

To use Scheduled Suspend / Undo Suspend features of Cayosoft Suspend the target user or group objects must periodically be checked to see if a suspend or undo suspend action is needed. 

Cayosoft Administrator can easily be configured to perform the necessary checks and actions freeing administrators from performing these operations manually.

Cayosoft Administrator Web UI also allows specifying date and time when a user or group should be suspended or undo-suspended. 

 

Video Tutorial

 

Suspend scheduled tasks runbooks

Cayosoft Administrator provides two runbooks to configure execution and reporting for scheduled suspends, located under the Future Suspends runbook tile: 'Process Scheduled Suspend Operations' and 'Report on Scheduled Suspend Operations' runbook.

Until the Process Scheduled Suspend Operations runbook will be configured, Web UI would present a warning message to the end user, if a user selects Suspend on schedule option: Scheduled operations have not been enabled.

Note: If you are running Cayosoft Administrator version 5.3.1 or earlier, you need to create all required rules one by one, as described in the last section of this article.

 

Future Suspends >  Process Scheduled Suspend Operations runbook

  1. Navigate to Home page -> Automation section
  2. Click Suspend Scheduled Tasks
  3. Select Future Suspends. It contains these rules:
    1. AD Users | Process Scheduled Suspends
    2. AD Users | Process Scheduled Undo Suspends
    3. AD Users | Enforce Object Retention (Delete)
    4. AD Groups | Process Scheduled Suspends
    5. AD Groups | Process Scheduled Undo Suspends
    6. AD Groups | Enforce Object Retention (Delete)
  4. Specify the scope for each report
  5. Specify runbook name, description, and labels
  6. Select rules output
  7. Click Finish
  8. Open created runbook
  9. Select Enable checkbox near Enforce/Schedule section and set up a scheduling interval (we recommend running the rule once a day)
Tip: If you manage several Active Directory domains with Cayosoft Administrator and you need to process scheduled suspend operations in those domains, then you need to configure a separate instance of the corresponding rule for each domain. See the section Configure individual rules in this article. It is recommended to add these individual rules to the 'Process Scheduled Suspend Operations' runbook.

 

Suspend reports > Report on Scheduled Suspend Operations runbook

  1. Navigate to Home page -> Automation section
  2. Click Suspend Scheduled Tasks
  3. Select Suspend reports. It contains these rules:
    1. AD Users | Report on Scheduled Suspend Operations
    2. AD Groups | Report on Scheduled Suspend Operations
    3. AD Users Account Expired
    4. AD Users Expired Office 365 Linked User Status
  4. Specify the scope for each report
  5. Specify runbook name, description, and labels
  6. Select rules output
  7. Click Finish
  8. Open created runbook
  9. Select Enable checkbox near Enforce/Schedule section and set up a scheduling interval (we recommend running the rule once a day)

 

Process scheduled suspend operations set to run on specific time

If it's critical for you to process scheduled suspend operations according to the time set on the object, you could schedule the runbook to run hourly. 

  1. Navigate to runbook processed scheduled suspend operations. By default it's Process Scheduled Suspend Operations
  2. In Enforce/Schedule section click Enable
  3. Click Hourly
Note 1: Scheduled suspend operations are executed according to the schedule, set on the runbook. Thus, operations set for execution at a specific time would be executed on the next run of the runbook.
Note 2: The time defined for future suspend operations is set in the time zone of the machine running Cayosoft Administration Server, and not the timezone of the client machine.

Example: If client time is 9.00 am and server time is 12 pm, and you schedule the user suspend to 10 am, this user will be suspended by the next runbook execution, because 10 am already passed on the server.

 

Configure individual rules to process scheduled suspend and undo suspend operations

Configure Cayosoft Administrator to process scheduled suspends

  1. Create a new rule AD Users | Process Scheduled Suspends or AD Groups | Process Scheduled Suspends, depending on the objects you need to process.
  2. Define rule scope, suspend settings, etc
  3. Select Enable checkbox near Enforce/Schedule section and set up a scheduling interval (we recommend running the rule once a day)

 

Configure Cayosoft Administrator to process scheduled undo suspends

  1. Create new rule AD Users | Process Scheduled Undo Suspends or AD Groups | Process Scheduled Undo Suspends, depending on the objects you need to process.
  2. Define rule scope, suspend settings, new password, etc
  3. Select Enable checkbox near Enforce/Schedule section and set up a scheduling interval (we recommend running the rule once a day)

 

Configure Cayosoft Administrator to process scheduled object retention (delete)

  1. Create new rule AD Users | Enforce Object Retention (Delete) or AD Groups | Enforce Object Retention (Delete), depending on the objects you need to process.
  2. Define rule scope and action settings
  3. Select Enable checkbox near Enforce/Schedule section and set up a scheduling interval (we recommend running the rule once a day)

 

Related articles

Comments

0 comments

Please sign in to leave a comment.