Process for accounts when employee leaves company

[FMCyb]

Hi,

I'd like to get feed back on this topic. We have Mixed mode authentication
enabled in PWA. We are using Windows authentication (mostly) by synchronizing
users with AD groups.

I've few questions.

Q1. How project server 2003 deals with accounts for resources who have left
the company / have been terminated? IT guys here delete those accounts in AD
after some time. So does project changes those AD auth accounts to Project
Auth accounts? Also tell me what is your company's policy on such accounts?

Q2. What if we enable only Windows Auth instead of mixed auth? What would
happen for such users?

Q4. What about the actuals which those resources had in plans? How you deal
with that?

Q3. What would happen with default administrator account (project auth) in
Project 2003 if we change authenticaiton type from mixed to Windows?

Q4. On the similar note what would happen if the option 'Clear USerAD GUID'
is greyed out for such resources or some one cleared their AD GUID? Such
accounts won't be updated from AD sync. So if such account of an old
employee's is deleted from AD, would that make any change in the account on
Project side?

Thanks
FMcyb

 

[Marc Soester]

Hi FMCyb,

OK lets try to answer some of your questions:
Q1: the user will be set to inactive within Project Server
Q2: you will need to change their logon to Windows accounts and they should
be able to log on just fine.
Q3: since you only changed the authentification type within their logon, the
actuals will still work fine. You dont need to change anything in regards to
the assignments.
Q4: sorry not quite sure. You may need to try

Hope this helps

 

[FMCyb]

Hi Marc,

Q1. My understanding is that if you have mixed mode authentication in
Project 2003 & you sync accounts with AD, if you delete an account from AD
(for terminated employee) then during next AD sync, that account's
authentication will be changed from AD to Project auth.

Q2. If you enable only Windows Authentication with AD Sync, then once you
delete an account, that account after next AD sync will be set to Inactive.

Let me know if Im wrong on this. Im still working on other issues.

FMcyb