Users who are created in AD from JumpCloud are automatically put into the Root User Container you configured during the installation of the AD Import & Sync Agents. If you need to move the user to the appropriate OU or sub OU, you\u2019ll have to do this within AD on the DC.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n

To create, update and deactivate user accounts<\/h3>\n\n\n\n

The following section covers how to manage AD user accounts from JumpCloud. With the AD Sync in place, JumpCloud Admins are able to manage AD users from the JumpCloud Admin Portal. This makes user onboarding, off-boarding, and management much easier. Additionally, this may help with removing the need to remotely access the DC for simple tasks within the Identity Lifecycle for user accounts.<\/p>\n\n\n\n

Creating Users in JumpCloud<\/h4>\n\n\n\n

JumpCloud Admins can create users in AD by binding any JumpCloud user to an AD Integrated User Group within JumpCloud. For example, if you\u2019ve synced the Accounting group from AD to JumpCloud via the Import Agent, then any JumpCloud user bound to this synced user group will be created within AD under the Root User Container. <\/p>\n\n\n\n

The user is created within AD, is a memberOf the associated user group (Security Group in AD), and their AD user account will use their JumpCloud Password. <\/p>\n\n\n\n

Suspending or deleting users in JumpCloud<\/h4>\n\n\n\n

Suspending or deleting users within JumpCloud will Disable the user account within AD. JumpCloud in any form will never remove or delete user accounts in any of the 3rd party integrations. (This also includes SAML, LDAP, AD, GWS, and M365). These changes will reflect in 90 seconds.<\/p>\n\n\n\n

Managing ADI<\/h2>\n\n\n\n