This article contains frequently asked questions about the Active Directory Sync feature.
When does Active Directory Sync run?
Active Directory sync runs every 5 hours, starting at 8am, with the last sync starting 11pm. These times are based on the local time of the server where the Mimecast Synchronization Engine is installed.
How are disabled users identified?
Mimecast uses the userAccountControl Active Directory attribute to calculate the status of a user.
What happens if I delete a user in Active Directory?
Users deleted from the company directory will not be removed from Mimecast on the sync after the user was deleted, however they will be switched from a Directory Generated user to a standard Mail Flow user which will have an effect on mail flow for the user if recipient validation is configured for known LDAP users only.
What happens if I delete a group in Active Directory?
Groups deleted from Active Directory will be removed from Mimecast on the sync after the group was deleted, unless the group is being used in a policy or definition.