Wednesday, June 9, 2010

Lotus Domino - Deleting a User from your system

To remove a user from your system is a multi-step process.  It is more than simply removing the entry in the public address book.  There are mail files and security lists that must be removed and changed on the system.  The “adminp” process will be used to make all of this happen.  These instructions will also tell you how to expedite the process.  Under normal circumstances, this process could take a day or more depending on the number of servers in the environment and the amount of databases to be processed.

Using the Domino Administrator client, open the People & Groups tab.  Find and select the person you want to delete.  Click on the “delete person” button.  You will be asked to verify that you wish to delete the person you selected.  If you are sure, click on yes otherwise click on no.  You will then go through a series of prompts about deleting mails files and adding the user name to groups.  When deleting the mail file you will have the following options:
  • Don’t delete mail file.  This will leave the file on the server.
  • Delete just the mail file specified in the Person record.  This will remove just the mail file specified in the Person record from the server.
  • Delete just the mail file specified in the Person record and all replicas.  This will remove the mail file specified in the person document and any replicas of that file that may be on other servers.
You then have the option of adding the user to a group, usually a Deny Access group.  This group is typically added to your databases as a precaution to exclude specifically those users within that list from using that database.
You should then be presented with another dialog box with three options for the final deletion.  This is the last step at which you can cancel out by selecting the cancel button.  If you are certain that you wish to delete this user, then select then select “No” from your dialog.  By selecting “no”, this will submit the delete as a request to the Administrative Requests database.  While the option “yes” says it will immediately process the request, it may take some time and may not process properly across a multi-server environment.
Multiple entries will be made to the Administrative Requests database for your request to delete this person.  You need to “push” these requests through the system now.  Open the Domino console either by using the administrative client or by going to the Domino server.  At the console, issue “tell adminp process all” and press enter.  This will tell the administrative process to process all requests.  Depending on the amount of requests on your server, this process may take some time to complete. 
From your administrative client, open the Administrative Requests database (admin4.nsf).  On the left side, select the view “Pending Administrator Approval” to see a list of requests that require approval.  The deletion of a file on the server must be approved.  Open and edit the request to delete the mail file for the person you requested to delete.  You will have an “approve” and “disapprove” button.  Select the “approve” button to delete the mail file and continue processing. Return to the console and issue “tell adminp process all” followed by the enter key again.  This will start the processing of your requests.  During this processing, the address book entry is deleted, the mail file is delete, entries in Access Control Lists are updated, and Reader/Author fields entries are updated.  If you have multiple servers, these changes are replicated out to your servers and processed also. 

No comments: