How to remove AD content from Prov Catalog after Explore

[Shashank Agarwal]

Hello,

We have run explore operation on AD, during this operation we have selected the whole OU and hence provisioning catalogue has been loaded with full data from AD.

Now when user is searching group in AD (without putting any filter) , it takes relatively more time as it traverses through the whole structure. To cater this , we want to remove the unused OUs from provisioning catalogue.

How is it possible to remove this unused OU from the acqired endpoint ?

Thanks,
Shashank

[Kenneth Verrastro]

There is not a function to "unexplore" the endpoint but if you can restrict the read permissions for the ID you used to acquire the endpoint then the next time you run the Explore those objects will not be returned due to the lack of permissions and so the Provisioning Server will believe they have been removed from the endpoint and therefore will remove them from the Provisioning Repository as well.