In my State agency, which deals with the same regulations and litigations that any state agency does, it is not possible to actually delete user IDs for a number of years. However, because of changes in Novell licensing for sites that use IDM, user licensing is now predicated on whether the ID has an Enabled IDM association, rather than whether It is an active account.
Therefore, it is fiscally advantageous to disable the eDir/Groupwise/IM associations of
old expired and/or eDir disabled accounts.
But these users often do return and need their account to work again.
Sometimes, after a previously disabled user object is moved from a Disabled container into the live container, after the IDM associations are enabled and processed, and the account is enabled, checking the GW object results in an error message as below.
You should see “The migration was successfully started!”
Give it time to process; every situation is different, from a couple seconds to minutes.
Check User ID GroupWise account in ConsoleOne.
“Post Office:” choice box.
“Visibility:” dialog box.
“External Sync Overide:” (“Sychronize according to…:”) dialog box.
“Expiration Date:” checkbox.
“Disable Logins” checkbox.
Re-connect to your normal GroupWise domain.
Disclaimer: As with everything else at NetIQ Cool Solutions, this content is definitely not supported by NetIQ, so Customer Support will not be able to help you if it has any adverse effect on your environment. It just worked for at least one person, and perhaps it will be useful for you too. Be sure to test in a non-production environment.