AD Sync Deleted Connections!

[MABrownParticipant]

This is both a question, and a cautionary tale.

Most of our Full user accounts (the system admins and form designers) were created prior to the ability to sync with an LDAP directory. Now we want to use the LDAP sync to import users, but because our Full user accounts were created before the ability to sync with AD, the AD Sync wants to delete them all.

There is no way to associate these existing legacy accounts with LDAP accounts during the sync, so I attempted to “migrate” to an LDAP account. I started by syncing with LDAP and adding just the one new account. I then changed the ownership of all of my forms and reports from the legacy account to the LDAP account. Connections (and connection actions) don’t have the ability to change “ownership” in the same manner as forms/reports. Instead, for every connection and action created by the legacy account, I updated the permissions to grant full control to the new, LDAP based account.

With all that done, I resync’ed again, this time allowing the sync to delete my legacy account. What I did not realize was that all of the Connections and Actions that I had created with my legacy account (and of which I could not change ownership) were deleted!

In retrospect, I should have exported them all prior to allowing the sync to delete the legacy account. Since I did not, is there any way to retrieve those lost Connections/Actions?

[MABrownParticipant]

Solved – sort of. Using the Admin console on the server, I was able to undelete the legacy account, which restored all of the connections as well. It would still be nice to be able to update the ownership of connections. I am hesitant to export the connections, allow them to be deleted by the sync, and then reimport them using the new account. If that breaks the forms that use those connections, it could be a real headache.

[Author]

Posts