Product(s): | ProjectWise Integration Server | ||
Version(s): | 08.11.11.574 | ||
Area: | User Synchronization Service | ||
Subarea: | MISC | ||
Original Author: | Dana Guthrie, Bentley Technical Support Group |
Problem Description
User has manually created Windows user accounts in Projectwise.
After some time these users keep getting disabled.
In checking the user accounts that he created that are getting disabled, the accounts where set to “Windows Synchronized”. This means the account is handled by the User synchronization service.
Explanation
When Projectwise User synchronization ran it disabled the users account because the user was not part of a group in Active Directory that was being synchronized with Projectwise nor was he listed in the users that were being synchronized by Projectwise..
There are three security settings or user account types that can be created in Projectwise.
- Logical users are users who are created directly in Projectwise and the user name and password are stored directly in the Projectwise database.
- Windows accounts are accounts created by the administrator that are exactly the same as the users Windows Active Directory account. Projectwise does not store the password for these user accounts, and uses Active Directory to authenticate the user at login.
- Windows Synchronized Accounts are user accounts brought in from Windows Active directory using the Projectwise Synchronization service. User accounts and groups are created automatically from Windows Active directory. The Admin can choose what groups or users to sync with this service. Passwords are not stored in ProjectWise and users are authenticated via active directory.
Steps to Resolve
- In Projectwise Administrator, Set the user account back to Windows to keep the account from being disabled by the User Synchronization service.
- If the account is supposed to be synchronized then make sure the account is part of one of the Acitve Directory groups that is being synched via Projectwise Synchronization Serive.
In Projectwise adminstrator go to Windows security system \ User Synchronization Service \ Synchronized accounts \ User groups. Compare the groups listed here to the groups the user is assinged to in Active Directory. The user must be in one of the groups being synchronized
See Also
For more information see the Projectwise Administrator help.