Security Compliance

Remove orphaned Active Directory (AD) scans from the Access Rights Manager (ARM)

Steps allowing to remove obsolete/orphaned Active Directory (AD) scans data.

First published date

11/3/2020 10:38 AM

Last published date

11/3/2020 10:38 AM

Overview

While removing Active Directory (AD) scan configuration (details available here) you have an option to remove or keep stored data. If you chose to leave stored data it will stay forever and you will no longer have possibility to remove it, since there will be no corresponding scan configuration. Below you will find suggestion on how to clean such data in case you wish to do so.

Product section

Access Rights Manager

Resolution

Suggestion below relates to direct modification of the content of Access Rights Manager (ARM) database. Please make sure to perform full backup of database prior to performing any steps suggested below.

Complete information about stored Active Directory (AD) scans is kept in the table ad._active_directory_scans. You can delete all rows where _domain column matches the Active Directory (AD) domain you wish to remove. You can also just set _is_in_db column to 0 for these records, and they will still remain in database but will be hidden from users.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.