Deactivated users and listusermap

I have deactivated some terminated users and when I run listusermap to a txt file some of the users still show up. Why?

Find more posts tagged with

Infor Lawson Technology Group - Discussion

Comments

The listusermap does not ignore disabled users. If the user has an OS Identity within Lawson security, in our case a LSFPROD identity, then that user will show in the listusermap report (we do not assign this identity to our ESS users). You would have to delete the OS Identity to remove it from the listing. The OS Identity is tied to a UID/NTID number, this information is attached/written to audit records and can be used to track changes/transactions that were performed, so beware if you delete it you also lose the ability to track that information.

unknown

Before disabling a user in ISS/ISA we remove the LSENV and SSOP along with the roles.

unknown

is there a better option for getting a list of active users other than LISTUSERMAP for audit purposes

unknown

Sorry this is not the answer to your question, but, LISTUSERMAP does not always give you a list of active users! I have found that the list produced does NOT have all users available, UNLESS the user list has been fully cached. The list gets cleared out during our once-a-week Lawson restart. If I run LISTUSERMAP after that, the list of UserMap entries is limited just to the clients who logged on. In order to fill in the list, I used to run LAUA. I can't run that any more, so now I ran USERGRPDEF and edit a Group list.

For example: Our Lawson restart was this past Saturday. This morning, I run LISTUSERMAP. It says at the start, "Total amount of Cach UserMap entries is 21". Then I run USERGRPDEF and edit group "ALL". Then, running LISTUSERMAP again, it says: "Total amount of Cache UserMap entries is 47".

deanna-plant

If using LDAP, you can use free software call Softerra LDAP Browser to dump your users. It gives you a much more detailed dump of your users - includes LSA attributes (roles, groups, etc).

don-kintzle

The best way to get a listing of active users, would be to run the RM User Attributes Report within Lawson Security Administrator and add a filter criteria of IsDisabled = NO. If you do not have access to this, you could also create the report using the Resource Query Node within IPA.

Copyright © 2025 Infor. All rights reserved.