Deleting users and groups synced from AD from Database

[hm]

Are there any maintenance queries that will allow me to delete all users and groups exported from AD (using ldap-authentication-context.xml) from the Alfresco database?

I have tried the 'clearAllChildren' attribute (in ldap-authentication-context.xml) by setting it to true but it does not work as expected.

Also if these users and groups are already associated with spaces I would like to remove them from the spaces as prior to this cleanup. Otherwise I am sure there would be integrity violations.

Any help from the Alfresco team will be greatly appreciated.

Thanks.

[andy]

Hi

You should be able to delete users and groups via the UI.
The permissoins assigned to these user and groups would be removed.

The LDAP import will remove all existing groups and people, not just those from LDAP imports.

Adding domain is on the list of things to do, but is not there at the moment. 

Regards

Andy

[hm]

Deleting from the UI will become an issue if the number of users are upwards of 2K. I was hoping a single script that can whack users and groups cleanly from the node and node_assoc tables.

[andy]

Hi

There is no way to identify users imported from LDAP. When we add domain to users then this will be improved. During the import we could decide which nodes to delete/clean up. This is waiting for delete support in the xml import.

Tidying up refereces/permissions etc can be bound to policies on the deletion of a person - again this has not yet been done. There is some clean up via the person service.

Regards

Andy