AD Alias Update Needed if New Aliases created when a user logs in?

[JohnBClark]

Does anyone know if we need to schedule the AD Alias Update for user needs to be scheduled if we have the Alias Update Options set to “Create new aliases only when a user logs on”?

We are changing our Alias configuration to the above setting due to the large number of users that are added to the AD groups but never log in to Business Objects. We are trying to eliminate unused accounts being created.

[dtolley]

I believe so. Create new aliases would only create the account on first login. If there are any changes to the user or group info or the user is removed/deactivated, those are picked up by the recurring scheduled updates. At least that’s how I’ve always interpreted the options.

[JohnBClark]

That makes sense. Thanks.