Applies to: All versions of Centrify Identity Service

Problem:

From the sync report we found one AD user was de-provisioned because "user is disabled". However, user is actually enabled in AD.

Why did Centrify de-provision an active account with the reason "user is disabled" which is not true?

Cause:

This can happen to user account which is expired in AD. When user's account expired, cloud will change this user's status to "Suspended" as Cloud will treat a suspended account as a 'disabled' one.

Resolution:

If this account is not supposed to be expired, please open the problematic user’s properties in ADUC, then click on the Account tab and change the "Account expires" settings (Select "Never" or set an appropriate "End of" Date).