Hi.
It appears that I am not the first one to experience issues with AX users linked to AD profiles.
My problem is with a user which had his name and email address changed in AD.
When the name was changed, AD changed the user Log On which now no longer matches the AX alias.
I guess that the auth. to AX works based on the user's SID (which remained unchanged) as the user is still able to log in to AX.
My problem is that the AX account is behaving strangely. We recently made some changes to a security role which apply as expected to all users except for the one that had the name changed.
I tried to delete the user in AX, re-import his account and potentially modify his user ID in AX (for backwards audit consistency).
Unfortunately, I get stuck here.
AX returns the following errors:
1. when trying to delete the user
Stack trace: The company does not exist.
Stack trace
(S)\Data Dictionary\Tables\SysUserInfo\Methods\Delete - line 21
2. When trying to update the user (i.e. disable the account)
The Active Directory user or group does not exist. Contact your network administrator.
3. When trying to update the user's options (i.e. modify the email settings)
Error in getting SID (although querying the DB shows that the SID in the AX user profile = SID in AD)
This is getting really frustrating. I have other users that will potentially experience the same issues when their names will change (i.e. someone getting married).
I thought of updating the user's alias directly on the DB and try to repeat the steps for deleting the user - however I'm not comfortable in experimenting such changes.
Does anyone have any suggestions on how to fix this?