{"id":85883,"date":"2023-06-05T13:09:14","date_gmt":"2023-06-05T17:09:14","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=85883"},"modified":"2023-09-12T19:30:22","modified_gmt":"2023-09-12T23:30:22","slug":"convert-ad-managed-user-accounts","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/convert-ad-managed-user-accounts","title":{"rendered":"Convert AD-Managed User Accounts"},"content":{"rendered":"\n<p>If your organization recently moved from a local Active Directory server to JumpCloud using the <a href=\"https:\/\/jumpcloud.com\/support\/Configure-the-Active-Directory-Integration\" target=\"_blank\" rel=\"noreferrer noopener\">Active Directory Integration (ADI)<\/a> and you want to decommission your AD Integration, you need to release your users from being externally managed in order for JumpCloud to become the sole identity manager for your users.&nbsp;To release users from external management, you&#8217;ll change the&nbsp;<kbd>externally_managed<\/kbd>&nbsp;parameter to&nbsp;<kbd>False<\/kbd>&nbsp;using JumpCloud&#8217;s PowerShell Module.&nbsp;<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>If you wish to remove the user(s) from the \u201cJumpCloud\u201d Active Directory Security Group you may do so, but only after completing the following procedure.<\/p>\n\n\n\n<p><strong>Note<\/strong>: The standard name for this Security Group is \u201cJumpCloud\u201d, yours may be different if changed during initial ADI configuration.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>Prerequisites<\/strong>:<\/p>\n\n\n\n<ul>\n<li>Use the AD Import or AD Sync agent to import or create users in JumpCloud from Active Directory.<\/li>\n\n\n\n<li><a href=\"https:\/\/github.com\/TheJumpCloud\/support\/wiki\/Installing-the-JumpCloud-PowerShell-Module\" target=\"_blank\" rel=\"noreferrer noopener\">Install the PowerShell Module<\/a>&nbsp;(<a href=\"https:\/\/www.youtube.com\/watch?v=bWYTcMwQFgw&amp;list=PLJg5pUGFrvf5H_RFdkln_ZZYBv1W-_vvk\" target=\"_blank\" rel=\"noreferrer noopener\">Watch a PowerShell Module Video Tutorial<\/a>)<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Step 1: <strong>Release a user, group of users, or all users from external management<\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>To release a user from external management using the JumpCloud PowerShell Module<\/strong><\/h3>\n\n\n\n<ol>\n<li>Open a PowerShell window and launch the JumpCloud PowerShell Module.<\/li>\n\n\n\n<li>Run the following command, replacing <kbd>jack.colby<\/kbd> with the appropriate JumpCloud user:&nbsp;<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>Set-JCUser -Username jack.colby -externally_managed $false<\/p>\n<\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>To release a group of users from external management<\/strong><\/h3>\n\n\n\n<p>Run the following command, replacing <kbd>Dev<\/kbd> with the appropriate JumpCloud group:&nbsp;<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>Get-JCUserGroupMember -GroupName Dev | Set-JCUser -externally_managed $false<\/p>\n<\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>To release all users in JumpCloud from external management<\/strong><\/h3>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>This will apply to&nbsp;<em><strong>ALL<\/strong><\/em>&nbsp;users in JumpCloud! Do not run this if you need some users to remain AD-managed.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>Get-JCUser&nbsp;| Set-JCUser -externally_managed $false<\/p>\n<\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Step 2: <strong>Remove user from the ADI-created user group<\/strong><\/h2>\n\n\n\n<ol>\n<li>Log in to the&nbsp;<a href=\"https:\/\/console.jumpcloud.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>. <\/li>\n\n\n\n<li>Navigate to <strong>USER MANAGEMENT &gt; User Groups.<\/strong><\/li>\n\n\n\n<li>Select the ADI-created user group and then select the <strong>Users <\/strong>tab.<\/li>\n\n\n\n<li>Deselect the users you would like to remove from the group.<\/li>\n\n\n\n<li>Click <strong>save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Step 3: <strong>Remove user from Active Directory security group<\/strong> <strong>(Optional)<\/strong><\/h2>\n\n\n\n<ol>\n<li>In Microsoft Active Directory, navigate to <strong>Management &gt; User Management &gt; Group Attributes<\/strong>.<\/li>\n\n\n\n<li>Choose the domain and OU.<\/li>\n\n\n\n<li>Select the desired list of users or import a CSV file with the preferred list of users.<\/li>\n\n\n\n<li>Select the security group from which the users should be removed, and click <strong>Apply<\/strong>.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>If your organization recently moved from a local Active Directory server to JumpCloud using the Active Directory Integration (ADI) and [&hellip;]<\/p>\n","protected":false},"author":218,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2904,2855,2856,2954,2916],"support_tag":[],"coauthors":[3011],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Convert AD-Managed User Accounts - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how AD-managed users utilize the externally_managed parameter, and how to alter the field with the JumpCloud PowerShell Module.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/convert-ad-managed-user-accounts\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Convert AD-Managed User Accounts\" \/>\n<meta property=\"og:description\" content=\"Learn how AD-managed users utilize the externally_managed parameter, and how to alter the field with the JumpCloud PowerShell Module.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/convert-ad-managed-user-accounts\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-12T23:30:22+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"nickconrad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/convert-ad-managed-user-accounts\",\"url\":\"https:\/\/jumpcloud.com\/support\/convert-ad-managed-user-accounts\",\"name\":\"Convert AD-Managed User Accounts - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:09:14+00:00\",\"dateModified\":\"2023-09-12T23:30:22+00:00\",\"description\":\"Learn how AD-managed users utilize the externally_managed parameter, and how to alter the field with the JumpCloud PowerShell Module.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/convert-ad-managed-user-accounts#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/convert-ad-managed-user-accounts\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/convert-ad-managed-user-accounts#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Convert AD-Managed User Accounts\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Convert AD-Managed User Accounts - JumpCloud","description":"Learn how AD-managed users utilize the externally_managed parameter, and how to alter the field with the JumpCloud PowerShell Module.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/convert-ad-managed-user-accounts","og_locale":"en_US","og_type":"article","og_title":"Convert AD-Managed User Accounts","og_description":"Learn how AD-managed users utilize the externally_managed parameter, and how to alter the field with the JumpCloud PowerShell Module.","og_url":"https:\/\/jumpcloud.com\/support\/convert-ad-managed-user-accounts","og_site_name":"JumpCloud","article_modified_time":"2023-09-12T23:30:22+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes","Written by":"nickconrad"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/convert-ad-managed-user-accounts","url":"https:\/\/jumpcloud.com\/support\/convert-ad-managed-user-accounts","name":"Convert AD-Managed User Accounts - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:09:14+00:00","dateModified":"2023-09-12T23:30:22+00:00","description":"Learn how AD-managed users utilize the externally_managed parameter, and how to alter the field with the JumpCloud PowerShell Module.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/convert-ad-managed-user-accounts#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/convert-ad-managed-user-accounts"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/convert-ad-managed-user-accounts#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Convert AD-Managed User Accounts"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/85883"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/218"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/85883\/revisions"}],"predecessor-version":[{"id":98360,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/85883\/revisions\/98360"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=85883"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=85883"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=85883"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=85883"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}