If you enable the tool's provisioning feature, you map Microsoft Active Directory groups to virtual provisioning groups. During the synchronization process, the tool identifies the Microsoft Active Directory users that do not have matching user accounts on the BlackBerry Device Service or Universal Device Service, and adds the user accounts as necessary. If you enable deprovisioning, the tool identifies user accounts that are not mapped to a virtual provisioning group and removes them from the server instance. For more information about provisioning rules, see Synchronization and provisioning rules.
If you enable provisioning and deprovisioning, it is a best practice to add and remove user accounts from the server using the tool only, instead of adding and removing the user accounts manually using the administration console. For more information, see Prerequisites: Using the BlackBerry Directory Sync Tool and Synchronization and provisioning rules.
Was this information helpful? Send us your comments.