Temporarily Deactivating a User
If you have users who are frequently disabled and enabled, you could consider a different naming convention for such users. For example, if George Swanson is a contract worker who will be returning to the company, you could add a suffix to his name, such as George Swanson (Disabled), and add him to a Disabled Users group. To close any possible security risks, you could also consider removing the user from all group and team memberships or changing his or her access control permissions.
Some business situations may require a user to be temporarily deactivated. For example, if a contract worker will be returning to the company after a short absence. Rather than losing the connection between the user LDAP entry and the Windchill user, you can use the following process to temporarily remove access to Windchill.
1. Edit the full name of the user to indicate that the user is deactivated. For example, you could add a “(Deactivated)” suffix to the user full name, such as “George Swanson (Deactivated)”.
2. Change the password of the user so the user can no longer access Windchill.
3. Add the user to a deactivated user group.
You can take additional steps to ensure that the user does not have permissions in Windchill.
• Remove the user from any Windchill groups and roles.
• Remove any explicit access control rules assigned to the user.
Users that are deactivated using this process will still appear in Windchill search and other Windchill users will be able to search for objects created or modified by the deactivated user.