Greetings!
Customer is looking for a way to clean up their users in WSO, and keep it tidy in the future.
For the moment they do not sync "Enabled" or "Disabled" status from ActiveDirectory, but we are considering recommending this for the customer.
However, if I am not mistaken, I have heard or read somewhere that this might not be a good idea in all situations.
As I understand, an AD-user that change to Disabled, then synced, will become "Inactive" in WSO. Then any devices registered on the user will be unenrolled. So I guess if anyone makes a mistake in AD, it could have a negative impact on the affected user, as their device will be wiped..? Is there anything else?
Do you have any experience with this setting?
Thank you!
