Network Management

Remove user account which is a member of the AD group from the Orion Platform using SQL query

Steps to follow to remove account which no longer synchronizes its settings with AD group settings during login process.

First published date

2/7/2022 1:16 PM

Last published date

2/7/2022 1:16 PM

Overview

Occasionally you may find Active Directory™ (AD) account no longer having its settings replicated from the AD group settings, for example, NCM Role set for the AD group is Administrator and the user account keeps being set as WebUploader.

Product section

Orion Platform

Cause

There is one more possibility that may explain such behaviour. If the initial order of AD groups of which user account is the member of was different before or the user was not a member of the AD group with the expected NCM Role (i.e. Administrator), the user account record (hidden) may have been created with relevant settings at the time (with reference to the initial AD group) and will no longer be updated as the initial group setting likely did not change.

Resolution

To resolve the issue you will need to delete the user account, but since it is hidden from the Orion Account Management you will have to use the below SQL query either using Orion Database Manager or any other tool (i.e. Microsoft SQL Server™ Management Studio™) allowing execution of the SQL query against the Orion database.
 
-- Scripts are not supported under any SolarWinds support program or service.
-- Scripts are provided AS IS without warranty of any kind. SolarWinds further
-- disclaims all warranties including, without limitation, any implied warranties
-- of merchantability or of fitness for a particular purpose. The risk arising
-- out of the use or performance of the scripts and documentation stays with you.
-- In no event shall SolarWinds or anyone else involved in the creation,
-- production, or delivery of the scripts be liable for any damages whatsoever
-- (including, without limitation, damages for loss of business profits, business
-- interruption, loss of business information, or other pecuniary loss) arising
-- out of the use of or inability to use the scripts or documentation.
DELETE FROM [dbo].[Accounts] WHERE [AccountID]='ACCOUNT'
DELETE FROM [dbo].[WebUserSettings] WHERE [AccountID]='ACCOUNT'
DELETE FROM [dbo].[UserWebViews] WHERE [AccountID]='ACCOUNT'
DELETE FROM [dbo].[UserTabs] WHERE [AccountID]='ACCOUNT'
DELETE FROM [dbo].[ResourceUserSetting] WHERE [AccountID]='ACCOUNT'

Note: Enter the user account instead of ACCOUNT.