# Stale Credential Account Validation on the Command Center

The Commvault runs the Stale Credentials process every 7 days to validate user details present in the Identity Server. If a user's information cannot be found on the Identity Server, the user is marked as hidden in the Command Center. After 15 consecutive failed validation attempts, the user's details and credentials are permanently deleted from the Command Center.

You can modify the behavior of the stale credentials process for the users associated with Active Directory provider by configuring the following additional settings:

Additional Setting | Description
--- | ---
nStaleCredsCheckHeartBeat | You can specify the time interval in seconds for which the CommServe runs on the Active Directory provider to check the user details and credentials.
nStaleCredsCheckMaxCount | You can specify the maximum number of Active Directory users and user groups that can be validated.
NumberOfDaysForADCredentialCheck | You can specify the time interval in days for which the CommServe runs on the Active Directory provider to check the user details and credentials.
RemoveDeletedADUsersAfterCount | You can specify the number of days after which the CommServe checks the Active Directory (AD) provider to identify and delete user details and credentials that have already been removed from the AD provider.
nAllowDisabledStaleObjects | You can include disabled Active Directory (AD) objects in the stale credentials check. When this value is set to 1, the CommCell evaluates disabled AD accounts during synchronization, ensuring that users re-enabled in AD are automatically re-enabled in CommCell during the next sync cycle.

×

Loading...