Enabling a Deleted User
There may be some cases where a previously deleted user must be re-enabled, such as a contract worker who has come back to the company after an absence. To enable an existing deleted user, use the EnableDisabledUser utility command-line utility. Before running this utility, confirm that the user you wish to re-enable still exists in the LDAP database. The EnableDisabledUser utility only restores a user object to Windchill if there is a corresponding LDAP entry and does not restore an LDAP entry. If the corresponding user entry in the LDAP database has been deleted, then that entry must be restored before you use this utility. Running the utility restores the deleted user’s access control permissions, owned objects, and team membership where the user is a direct member of a role. The utility does not restore any other type of group or team membership. Only a site-administrator can run this utility.
windchill wt.org.EnableDisabledUsers -queryCriteria=<query criteria> [-service=<service>] -user=<user> -password=<password>
 |
The wt.org.EnableDisabledUsers utility does not recreate a user’s personal cabinet if it has been deleted. If it is possible that you will enable a deleted user, then you should not delete the user’s personal cabinet.
|
Use the following procedure to run the wt.org.EnableDisabledUsers utlity.
1. Create the LDAP entry. Ensure the user ID in the LDAP entry matches the user name that will be restored in Windchill.
2. Run the wt.org.EnableDisabledUsers utility with the query criteria and the optional service parameter, which are described in the following table.
a. For example: windchillwt.org.EnableDisabledUsers "name='testuser004' orname='testuser005' orname='testuser006'" "service=com.ptc.ptcnet.Ldap"
|
Command-Line Parameter
|
Description
|
||
|---|---|---|---|
|
-queryCriteria=<query criteria>
|
Search criteria for the name of the user you want to re-enable. If you want to re-enable multiple users you can use a search wild-card character, such as *. For example, searching “name=joe*” returns all user entries that begin with “joe”. Searching “name=*” returns all disabled users.
|
||
|
-service=<service name>
|
(Optional) Service name associated with the directory server where the user exists.
If the service parameter is not specified, Windchill searches for the user in all LDAP servers.
|
||
|
-user=<user name>
|
User name for an authorized site administrator.
|
||
|
-password=<user password>
|
User password for an authorized site administrator.
|
For example, Joe is a contractor who has returned to ABC Company after an absence. Before running the utility, the administrator verifies that Joe’s user entry is still in the LDAP database. If Joe’s directory entry has been deleted, the administrator would need to restore it before continuing.
After confirming that Joe’s LDAP entry exists, the administrator runs the utility from the command-line window.
windchill wt.org.EnableDisabledUsers -queryCriteria="name=joe" -service=com.abc.EnterpriseLdap -user=<administrator user ID> -password=<administrator password>
 |
Before using the EnableDisabledUser utility on a live system, run the utility on test server first. This allows you to verify that the command-line parameter configuration is correct and that the prerequisites for running the utility have been met. Verifying results on a test server is highly recommended if you are using wild-card characters to search for user entries. This allows you to check for unintended results.
|
|
|
When restoring an LDAP entry, be certain that the user name exactly matches the user name that was deleted. If the entries do not match, then a new user object will be created when Windchill synchronizes with the directory server or when the EnableDisabledUser utility is used.
|
 |
If you have users who are frequently disabled and enabled, you can temporarily deactivate the user rather than deleting the user from Windchill. For more information, see Temporarily Deactivating a User.
|