This document contains official content from the BMC Software Knowledge Base. It is automatically updated when the knowledge article is modified.
Track-It! 2019 R3
A Non-domain admin account is being used in the Track-It! Directory importer to fetch the users.
When an Active Directory object is deleted, a small part of the object stays in the deleted objects container for a specified time. These objects in AD called tombstone objects that are records of deleted users in AD. It stays there so that other domain controllers that are replicating changes will become aware of the deletion. By default, only the System Admin account and members of the Administrators group can view the contents of this container.
Track-It! Directory importer uses those records in order to determine which users to remove from Track-It! and in AD. Only Domain Admin accounts can access/view these tombstone records. Therefore, Directory Importer requires that the account used be a Domain Admin so it can properly handle users that have been deleted from AD.