AD Users | Enforce Object Retention (Legacy)

Rule description

This rule queries the selected domain for suspended user objects and deletes those objects past the Suspend Retention Period.

NOTE: Requires Cayosoft® Suspend™ tool to be installed on the machine running the Cayosoft Administrator Service.

Use this rule when you need to delete objects that are past the Suspend Retention Period.

To simultaneously delete Microsoft 365 user account, linked to the suspended Active Directory account, set the Microsoft 365 user to Delete.

Setting name	Description
Limit scope to this domain or OU	This setting defines the search query scope. To improve query performance, limit the scope to a specific OU. IMPORTANT: To test the rule configuration, limit the rule scope to an OU that contains test accounts or objects and use the Preview feature.
Other Query Settings
Properties to display	Each object property defined in this setting matches the column that will be displayed in the Web Portal for this web query. To display additional columns, add the required properties to the Properties to display list. To add extension attribute 1 that is synchronized from AD, you need to use a value like: Copy `"OnPremisesExtensionAttributes/extensionAttribute1~Extension Attribute 1"`
Sort by	Sort result object list.

Setting name	Description
Office 365 user	Set to Delete or Delete Permanently to delete a matching Microsoft 365 user account. In this case, Microsoft 365 user account will be deleted by the Delete \| Office 365 User rule.

This section defines the output format of this rule.

To get more information about this section, please see the Rule Output section article.

This section defines the schedule for how often to run the rule.

To get more information about this section, please see the Rule Enforce/Schedule section article.