Hi all,
We have been having an issue with Web Help Desk in which our clients are being marked as Inactive despite them having AD accounts which are enabled. Since we are a school, we update AD each year to account for the change in students' enrollment status which may include having their AD accounts disabled, but not deleting them. It used to work for us where the auto-synchronization would manage this on its own. However, we are now hearing that clients are unable to put in tickets due to their WHD accounts being inactive. I am able to manually re-activate their WHD accounts just for the sake of moving them forward with ticket creation, but this means our client records aren't as they should be. Below is what I know and have done so far:
- We do not appear to be having any issues with WHD contacting our LDAP server
- The settings under Connection Basics and Attribute Mappings appear to be correct (I can post screenshots if this will be helpful)
- This issue doesn't necessarily seem to affect all of our clients and there is no clear pattern
- I made a slight correction to the search filter as it previously had some extra spaces inserted, but it did not have any effect
- Contacted WHD support who remoted in and made some changes which were primarily related to RAM allocation for JVM (this didn't seem to help at all other than with performance)
I took one client and used it as a test to see what would happen when I made various changes. Initially, it was marked as Inactive in WHD which meant I was unable to search for the client by last name, but if I checked Search LDAP, it would show the client record. As a test, I disabled the relevant AD account, performed a manual sync, and I was then unable to search for it even with Search LDAP checked (this is what I expected to see). When I manually activate the client and perform a manual sync (with the AD account enabled), it remains set to Active. This is good, but I have 800+ current clients to verify along with a larger number of clients that should stay inactive (employees that have resigned, students not returning, etc.)
Essentially, I would like for WHD to sync with AD such that accounts which are enabled in AD are marked as Active in WHD and those that are disabled in AD are marked as Inactive in WHD. Any thoughts on where to go next?
Thanks!
Steve