{"id":85519,"date":"2023-06-05T13:09:18","date_gmt":"2023-06-05T17:09:18","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=85519"},"modified":"2024-10-29T10:38:38","modified_gmt":"2024-10-29T14:38:38","slug":"advanced-configurations-for-active-directory-ad-import","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import","title":{"rendered":"Advanced Configurations for the Active Directory Import Agent"},"content":{"rendered":"\n<p>Configuration options are available after you install the Active Directory Integration (ADI) Import Agent. These configuration options are in a JSON config file named <kbd>jcadimportagent.config<\/kbd>. You can find the config options in the file\u2019s <kbd>&#8220;MainLoop&#8221;<\/kbd> section.\u00a0<\/p>\n\n\n\n<p><strong>Prerequisites<\/strong>:&nbsp;<\/p>\n\n\n\n<ul>\n<li>The AD Import agent is installed per that section of the <a href=\"https:\/\/jumpcloud.com\/support\/Configure-the-Active-Directory-Integration\" target=\"_blank\" rel=\"noreferrer noopener\">Configure the ADI<\/a> article.<\/li>\n<\/ul>\n\n\n\n<p><strong>To change default configurations for a domain controller<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Go to the JumpCloud folder where the AD Import agent is installed on a domain controller.<\/li>\n\n\n\n<li>Open the <kbd>jcadimportagent.config<\/kbd> file.\u00a0<\/li>\n\n\n\n<li>Edit the configurations in the <kbd>&#8220;MainLoop&#8221;<\/kbd> section of the file. <\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>You\u2019ll need to edit the <kbd>jcadimportagent.config.json<\/kbd> file for every domain controller on which AD Import is installed.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p>The following options are available for configuration:<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-passwordchangelistener-polltimemillis\"><strong>PasswordChangeListener &#8211; PollTimeMillis<\/strong><\/h2>\n\n\n\n<p>This is the amount of time the agent waits before attempting to reconnect to the password filter DLL when there was an error.&nbsp;<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>We don\u2019t recommend changing this setting without direction from JumpCloud support.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-syncadditionalattributes\"><strong>SyncAdditionalAttributes<\/strong><\/h2>\n\n\n\n<p>This setting controls the behavior of syncing additional work-related user attributes from AD to JumpCloud. <\/p>\n\n\n\n<p>The value can be either <kbd>true<\/kbd> or <kbd>false<\/kbd>; the default setting is <kbd>true<\/kbd>. When set to <kbd>true<\/kbd>, the additional attributes that import and sync from AD to JumpCloud are: Display Name, Description, JobTitle, Department, Company, Location, EmployeeType, PhoneNumbers, Addresses, and Manager will imported and synced from AD to JumpCloud. a user is deleted from JumpCloud if they are dissociated. When set to <kbd>false<\/kbd>, only First Name, Last Name, Username, and Email attributes import and sync from AD to JumpCloud.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-userdissociationaction\"><strong>UserDissociationAction<\/strong><\/h2>\n\n\n\n<p>This setting controls the behavior of user dissociations &#8211; or what happens when a user is deleted, disabled, or removed from the JumpCloud integration security group in AD. <\/p>\n\n\n\n<p>This can be set to either <kbd>remove<\/kbd> or <kbd>unbind<\/kbd>; the default setting is <kbd>remove<\/kbd>. When set to remove, a user is deleted from JumpCloud if they are dissociated. When set to unbind, a user is unbound from the AD instance, but remains in JumpCloud if they are dissociated, and JumpCloud continues to manage that user\u2019s identity.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-userfieldmapping-nbsp\"><strong>UserFieldMapping&nbsp;<\/strong><\/h2>\n\n\n\n<p>This setting controls the mapping of JumpCloud\u2019s username field from AD on import. This can be set to either map JumpCloud usernames to <kbd>\u201csAMAccountName\u201d<\/kbd> or <kbd>\u201cuserPrincipalName\u201d<\/kbd>. The default setting for all new installations of AD Import is to map the JumpCloud username to <kbd>\u201csAMAccountName\u201d<\/kbd>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-usertakeoveraction\"><strong>UserTakeoverAction<\/strong><\/h2>\n\n\n\n<p>This setting controls the behavior of user take over &#8211; or what happens when an existing JumpCloud user account is taken over from AD. This can be set to <kbd>deactivate<\/kbd> or <kbd>retain<\/kbd>.<em> <\/em>The default setting is <kbd>deactivate<\/kbd>. When set to <kbd>deactivate<\/kbd>, existing user accounts are placed into a Pending state after they are taken over from AD. Pending users are directed to reset their passwords in AD to ensure they are in sync between AD and JumpCloud. When set to <kbd>retain<\/kbd>, the user state remains the same for existing user accounts that are taken over from AD.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-userdisableaction\"><strong>UserDisableAction<\/strong><\/h2>\n\n\n\n<p>This setting controls the behavior in JumpCloud when a user is disabled in AD and the behavior in AD when a user is suspended in JumpCloud. <a href=\"https:\/\/jumpcloud.com\/support\/suspend-and-reactivate-users\" target=\"_blank\" rel=\"noreferrer noopener\">Learn about suspending users in JumpCloud<\/a><strong>.<\/strong><\/p>\n\n\n\n<p>For this setting to control what happens to a user in JumpCloud after the user is disabled in AD, the user must be a member of the JumpCloud Integration Security Group. <\/p>\n\n\n\n<p>UserDisableAction can be set to the following:<\/p>\n\n\n\n<ul>\n<li><kbd>suspend<\/kbd>: when a user is disabled in AD, the corresponding JC user is suspended.<\/li>\n\n\n\n<li><kbd>remove<\/kbd>: when a user is disabled in AD, the corresponding JumpCloud user is deleted.<\/li>\n\n\n\n<li><kbd>unbind<\/kbd>: when a user is disabled in AD, the corresponding user is no longer managed externally.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>About UserDisableAction\u2019s default settings:<\/p>\n\n\n\n<ul>\n<li>For new installs of the Import agent, the default setting for this option is <kbd>suspend<\/kbd>.&nbsp;<\/li>\n\n\n\n<li>An upgrade of the Import agent retains the UserDisableAction setting.<\/li>\n\n\n\n<li>An upgrade of the Import agent with a value for UserDissociateAction will have UserDisableAction set to the same value.&nbsp;<\/li>\n\n\n\n<li>An upgrade of the Import agent without a value for userDissociateAction will have UserDisableAction set to <kbd>remove<\/kbd>.&nbsp;<\/li>\n\n\n\n<li>The value for userDisableAction takes precedence over the value for UserDissociateAction.<\/li>\n<\/ul>\n\n\n\n<p><strong>Suspend Actions on the Sync Agent<\/strong><\/p>\n\n\n\n<ul>\n<li>When an active JumpCloud user with a corresponding AD user is suspended in JumpCloud, the user is disabled in AD. The JumpCloud user remains suspended.<\/li>\n\n\n\n<li>When an active JumpCloud user without a corresponding AD user is suspended, the user is created and then disabled in AD. The user remains suspended in JumpCloud.<\/li>\n<\/ul>\n\n\n\n<p><strong>Suspend Actions on the Import Agent<\/strong><\/p>\n\n\n\n<ul>\n<li>When the AD Import agent has no UserDisableAction property, or has UserDisableAction set to <kbd>suspend<\/kbd><em>,<\/em> and a user is disabled in AD:\n<ul>\n<li>If a user doesn\u2019t exist in JumpCloud, a user is created in JumpCloud according to current AD Import rules.<\/li>\n\n\n\n<li>If a user exists in JumpCloud: unsuspend the existing or created user if the AD user isn\u2019t disabled.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>When the AD Import agent has UserDisableAction set to <kbd>unbind<\/kbd> and a user is disabled in AD:\n<ul>\n<li>If a user doesn\u2019t exist, or isn\u2019t owned by this AD Import agent, a new user isn\u2019t created in JumpCloud.<\/li>\n\n\n\n<li>If a user owned by this AD Import agent exists in JumpCloud, externally managed fields are cleared.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>When the AD Import agent has UserDisableAction set to <kbd>remove<\/kbd> and a user is disabled in AD:\n<ul>\n<li>If a user doesn\u2019t exist in JumpCloud, or isn\u2019t owned by this AD Import agent, a user isn\u2019t created in JumpCloud.<\/li>\n\n\n\n<li>If a user owned by this AD Import agent exists in JumpCloud, the user is deleted from JumpCloud.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p>The following tables describe the actions taken in AD and JumpCloud for existing and new users for UserDisableAction settings.<\/p>\n\n\n\n<div class=\"wp-block-wpdatatables-wpdatatables-gutenberg-block\">\n    <h3 class=\"wpdt-c\"\n        id=\"wdt-table-title-175\">Suspend: Existing User<\/h3>\n<div class=\"wpdt-c row wpDataTableContainerSimpleTable wpDataTables wpDataTablesWrapper\n\"\n    >\n        <table id=\"wpdtSimpleTable-175\"\n           style=\"border-collapse:collapse;\n                   border-spacing:0px;\"\n           class=\"wpdtSimpleTable wpDataTable\"\n           data-column=\"3\"\n           data-rows=\"7\"\n           data-wpID=\"175\"\n           data-responsive=\"0\"\n           data-has-header=\"1\">\n\n                    <thead>        <tr class=\"wpdt-cell-row \" >\n                            <th class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-bold\"\n                                    data-cell-id=\"A1\"\n                data-col-index=\"0\"\n                data-row-index=\"0\"\n                style=\" width:32.346241457859%;                padding:10px;\n                \"\n                >\n                                UserDisableAction Setting                <\/th>\n                                            <th class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-bold\"\n                                    data-cell-id=\"B1\"\n                data-col-index=\"1\"\n                data-row-index=\"0\"\n                style=\" width:25.968109339408%;                padding:10px;\n                \"\n                >\n                                Action in AD                <\/th>\n                                            <th class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-bold\"\n                                    data-cell-id=\"C1\"\n                data-col-index=\"2\"\n                data-row-index=\"0\"\n                style=\" width:41.685649202733%;                padding:10px;\n                \"\n                >\n                                Action in JumpCloud                <\/th>\n                                        <\/tr>\n                    <tbody>        <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-merged-cell \"\n                 colspan=\"1\"  rowspan=\"2\"                 data-cell-id=\"A2\"\n                data-col-index=\"0\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                suspend                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B2\"\n                data-col-index=\"1\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Disabled                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C2\"\n                data-col-index=\"2\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Suspend                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                                        <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B3\"\n                data-col-index=\"1\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Enabled                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C3\"\n                data-col-index=\"2\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Not suspended \/ active                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-merged-cell \"\n                 colspan=\"1\"  rowspan=\"2\"                 data-cell-id=\"A4\"\n                data-col-index=\"0\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                remove                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B4\"\n                data-col-index=\"1\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Disabled                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C4\"\n                data-col-index=\"2\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Deleted from JumpCloud                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                                        <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B5\"\n                data-col-index=\"1\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Enabled                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C5\"\n                data-col-index=\"2\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                N\/A                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-merged-cell \"\n                 colspan=\"1\"  rowspan=\"2\"                 data-cell-id=\"A6\"\n                data-col-index=\"0\"\n                data-row-index=\"5\"\n                style=\"                padding:10px;\n                \"\n                >\n                                unbind                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B6\"\n                data-col-index=\"1\"\n                data-row-index=\"5\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Disabled                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C6\"\n                data-col-index=\"2\"\n                data-row-index=\"5\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Externally managed fields are cleared, user is removed from groups                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                                        <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B7\"\n                data-col-index=\"1\"\n                data-row-index=\"6\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Enabled                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C7\"\n                data-col-index=\"2\"\n                data-row-index=\"6\"\n                style=\"                padding:10px;\n                \"\n                >\n                                N\/A                <\/td>\n                                        <\/tr>\n                    <\/table>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-wpdatatables-wpdatatables-gutenberg-block\">\n    <h3 class=\"wpdt-c\"\n        id=\"wdt-table-title-176\">Suspend: New User<\/h3>\n<div class=\"wpdt-c row wpDataTableContainerSimpleTable wpDataTables wpDataTablesWrapper\n\"\n    >\n        <table id=\"wpdtSimpleTable-176\"\n           style=\"border-collapse:collapse;\n                   border-spacing:0px;\"\n           class=\"wpdtSimpleTable wpDataTable\"\n           data-column=\"3\"\n           data-rows=\"7\"\n           data-wpID=\"176\"\n           data-responsive=\"0\"\n           data-has-header=\"1\">\n\n                    <thead>        <tr class=\"wpdt-cell-row \" >\n                            <th class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-bold\"\n                                    data-cell-id=\"A1\"\n                data-col-index=\"0\"\n                data-row-index=\"0\"\n                style=\" width:33.333333333333%;                padding:10px;\n                \"\n                >\n                                UserDisableAction Setting                <\/th>\n                                            <th class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-bold\"\n                                    data-cell-id=\"B1\"\n                data-col-index=\"1\"\n                data-row-index=\"0\"\n                style=\" width:33.333333333333%;                padding:10px;\n                \"\n                >\n                                Action in AD                <\/th>\n                                            <th class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-bold\"\n                                    data-cell-id=\"C1\"\n                data-col-index=\"2\"\n                data-row-index=\"0\"\n                style=\" width:33.333333333333%;                padding:10px;\n                \"\n                >\n                                Action in JumpCloud                <\/th>\n                                        <\/tr>\n                    <tbody>        <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-merged-cell \"\n                 colspan=\"1\"  rowspan=\"2\"                 data-cell-id=\"A2\"\n                data-col-index=\"0\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                suspend                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B2\"\n                data-col-index=\"1\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Disabled                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C2\"\n                data-col-index=\"2\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Suspended                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                                        <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B3\"\n                data-col-index=\"1\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Enabled                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C3\"\n                data-col-index=\"2\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Not suspended \/ active                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-merged-cell \"\n                 colspan=\"1\"  rowspan=\"2\"                 data-cell-id=\"A4\"\n                data-col-index=\"0\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                remove                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B4\"\n                data-col-index=\"1\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Disabled                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C4\"\n                data-col-index=\"2\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                N\/A                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                                        <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B5\"\n                data-col-index=\"1\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Enabled                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C5\"\n                data-col-index=\"2\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                User is created                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-merged-cell \"\n                 colspan=\"1\"  rowspan=\"2\"                 data-cell-id=\"A6\"\n                data-col-index=\"0\"\n                data-row-index=\"5\"\n                style=\"                padding:10px;\n                \"\n                >\n                                unbind                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B6\"\n                data-col-index=\"1\"\n                data-row-index=\"5\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Disabled                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C6\"\n                data-col-index=\"2\"\n                data-row-index=\"5\"\n                style=\"                padding:10px;\n                \"\n                >\n                                N\/A                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                                        <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B7\"\n                data-col-index=\"1\"\n                data-row-index=\"6\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Enabled                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C7\"\n                data-col-index=\"2\"\n                data-row-index=\"6\"\n                style=\"                padding:10px;\n                \"\n                >\n                                User is created                <\/td>\n                                        <\/tr>\n                    <\/table>\n<\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-disable-scenarios\"><strong>Disable Scenarios<\/strong><\/h3>\n\n\n\n<p>The following scenarios describe the UserDisableAction setting you should apply to achieve a desired behavior when a user is disabled in AD.<\/p>\n\n\n\n<p>Import Only<\/p>\n\n\n\n<ul>\n<li>If you want disabled users to be retained and suspended in JumpCloud, set UserDisableAction to <kbd>suspend<\/kbd>.<\/li>\n\n\n\n<li>If you want disabled users to be removed from JumpCloud and all associated AD groups and external directories, set UserDisableAction to <kbd>remove<\/kbd>.<\/li>\n\n\n\n<li>If you want disabled users to be removed from the domain in JumpCloud and all associated AD groups, set UserDisableAction to <kbd>unbind<\/kbd>.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-suspend-scenarios\"><strong>Suspend Scenarios<\/strong><\/h3>\n\n\n\n<p>The following scenarios describe the UserDisableAction setting you should apply to achieve a desired behavior when a user is suspended in JumpCloud.<\/p>\n\n\n\n<p>Sync and Import Agents<\/p>\n\n\n\n<ul>\n<li>If you want users that are suspended in JumpCloud to remain in JumpCloud with all associated group and directory associations, set UserDisableAction to <kbd>suspend<\/kbd>.<\/li>\n\n\n\n<li>If you want users that are suspended in JumpCloud to be removed from JumpCloud and all associated groups and external directories, set UserDisableAction to <kbd>remove<\/kbd>.<\/li>\n\n\n\n<li>If you want users that are suspended in JumpCloud to be removed from all associated groups and external directories, but remain in JumpCloud, set UserDisableAction to <kbd>unbind<\/kbd>.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-userexpireaction\"><strong>UserExpireAction<\/strong><\/h2>\n\n\n\n<p>This setting controls the behavior in JumpCloud when an AD user\u2019s password expires.&nbsp;<\/p>\n\n\n\n<p>UserExpireAction can be set to the following:<\/p>\n\n\n\n<ul>\n<li><kbd>expire<\/kbd>: when an AD user\u2019s password expires, the corresponding JumpCloud user\u2019s password is expired.<\/li>\n\n\n\n<li><kbd>maintain<\/kbd>: when an AD user\u2019s password expires, the corresponding JumpCloud user\u2019s password remains active.<\/li>\n<\/ul>\n\n\n\n<p>About UserExpireAction\u2019s default settings:<\/p>\n\n\n\n<ul>\n<li>For new installs of the Import agent, the default setting for this option is <kbd>expire<\/kbd>.<\/li>\n\n\n\n<li>An upgrade of the Import agent retains the UserExpireAction setting, if it is set.<\/li>\n\n\n\n<li>An update of the Import agent without a setting for UserExpireAction sets this option to <kbd>maintain<\/kbd>.<\/li>\n<\/ul>\n\n\n\n<p>Expire actions on the Sync Agent<\/p>\n\n\n\n<ul>\n<li>If a user\u2019s password expires in JumpCloud, their password expires in AD.<\/li>\n<\/ul>\n\n\n\n<p>Expire Actions on the Import Agent<\/p>\n\n\n\n<ul>\n<li>When the Import agent has no specified setting for UserExpireAction, or has UserExpireAction set to <kbd>expire<\/kbd>:\n<ul>\n<li>An existing JumpCloud user with an expired password in AD immediately expires in JumpCloud.<\/li>\n\n\n\n<li>JumpCloud\u2019s <kbd>external_password_expiration_date<\/kbd> field is set to the value in AD.<\/li>\n\n\n\n<li>If a user doesn\u2019t exist in JumpCloud and isn\u2019t owned by the AD Import agent, a new user is created in JumpCloud and then expires.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>When the AD Import agent has UserExpireAction set to <kbd>maintain<\/kbd>:\n<ul>\n<li>Nothing happens in JumpCloud; the user\u2019s password stays active.<\/li>\n\n\n\n<li>JumpCloud\u2019s <kbd>external_password_expiration_date<\/kbd> field is cleared.<\/li>\n\n\n\n<li>If a user doesn\u2019t exist in JumpCloud and isn\u2019t owned by the AD Import agent, a new user is created in JumpCloud.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Configuration options are available after you install the Active Directory Integration (ADI) Import Agent. These configuration options are in a [&hellip;]<\/p>\n","protected":false},"author":205,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2904,2855,2954],"support_tag":[],"coauthors":[2839,3011],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Advanced Configurations for the Active Directory Import Agent - JumpCloud<\/title>\n<meta name=\"description\" content=\"Explore advanced configurations for the JumpCloud AD Import agent, which are available by modifying the configuration files.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Advanced Configurations for the Active Directory Import Agent\" \/>\n<meta property=\"og:description\" content=\"Explore advanced configurations for the JumpCloud AD Import agent, which are available by modifying the configuration files.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-29T14:38:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"joyjaswinski, nickconrad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import\",\"url\":\"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import\",\"name\":\"Advanced Configurations for the Active Directory Import Agent - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:09:18+00:00\",\"dateModified\":\"2024-10-29T14:38:38+00:00\",\"description\":\"Explore advanced configurations for the JumpCloud AD Import agent, which are available by modifying the configuration files.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Advanced Configurations for the Active Directory Import Agent\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Advanced Configurations for the Active Directory Import Agent - JumpCloud","description":"Explore advanced configurations for the JumpCloud AD Import agent, which are available by modifying the configuration files.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import","og_locale":"en_US","og_type":"article","og_title":"Advanced Configurations for the Active Directory Import Agent","og_description":"Explore advanced configurations for the JumpCloud AD Import agent, which are available by modifying the configuration files.","og_url":"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import","og_site_name":"JumpCloud","article_modified_time":"2024-10-29T14:38:38+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"7 minutes","Written by":"joyjaswinski, nickconrad"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import","url":"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import","name":"Advanced Configurations for the Active Directory Import Agent - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:09:18+00:00","dateModified":"2024-10-29T14:38:38+00:00","description":"Explore advanced configurations for the JumpCloud AD Import agent, which are available by modifying the configuration files.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/advanced-configurations-for-active-directory-ad-import#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Advanced Configurations for the Active Directory Import Agent"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/85519"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/205"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/85519\/revisions"}],"predecessor-version":[{"id":116974,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/85519\/revisions\/116974"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=85519"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=85519"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=85519"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=85519"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}