Devolutions PAM is alerting many, many times when a user that's synced is disabled. It's sending the following alert:
Hi x,
This is to notify you that an Services/Authentication provider synchronization related action has occurred on Devolutions Server.
Authentication provider users synchronization succeded with warnings
6/16/2025 3:15:05 AM CEST
Message:
username: lblDisabled
In one weekend we received about 100 emails about this user. There should only be one alert about this.
Can this be fixed?
Hello,
Thank you for reaching out to us regarding this matter. I understand that you do not want to be bothered by an account that is already disabled because you already know the sync will fail. The only way to avoid this for now is to disable all heartbeat failures in your notification preferences. However, this also means that you could miss some important alerts. I know it is not the best solution for now.
In your situation, I understand you have a disabled account with your provider, and it is "normal" if it is not synchronized. Am I correct? Do you expect that account to be reenabled soon? I'm just curious to know why you have such an account in your PAM that you know will never be synced for a long period. We are looking to solve that issue, but please, let me know more about your context and why you get those alerts. We will see how we could improve our application to avoid unnecessary alerts.
Best regards,
François Dubois
Hi François,
In this case the person stopped working at our company. At the moment the employee has the last working day the acount will be automatically disabled and after a certain time period the account will be automatically deleted.
So this is normal behavior.
Hello,
Thank you for your answer. If my understanding is correct, the PAM account will be deleted only when the account is automatically deleted by the provider, am I right? Do you have automation that will delete the PAM account in DVLS, or will it be manual? Would it work for you if we send an alert only once and a new alert is sent again only if a sync is successful and fails again?
Best regards,
François Dubois
Hi François,
The "normal" Active Directory account will be deleted automatically, the PAM Active Directory account wil be manually deleted in Active Directory and DVLS (we have our own monitoring of these accounts within Active Directory).
Your sugestion will work for us!
Hi,
Can you give a statusupdate about this? We still have this problem.
Hello,
We have not worked on that yet, but I'm increasing the priority since I understand it can be annoying to receive all those emails. We will post back here once we have an update.
Best regards,
François Dubois
Hello,
Thank you for being so patient!
I am pleased to inform you that the issue has been resolved in the latest Devolutions server version (2025.3.10.0):
https://docs.devolutions.net/server/getting-started/installation/upgrade-server
We also recommend that you first perform the update in a staging/test environment:
https://docs.devolutions.net/server/kb/how-to-articles/create-server-staging-instance
Since this is resolved, I will mark this thread as resolved. If the problem persists, please let us know.
Best regards,
Maxim Robert