Remove Users From AD Group Using Nintex Workflow and SharePoint Server 2016

So the first step is to create a list with the name, say: AD Group Users in SharePoint which will act as the configuration list.



Add the below column to the List.

Remove User? – Modifying this column will trigger the workflow to remove the user

Now the basic infrastructure is in place. Let’s go ahead and design the workflow. Click on ‘Create a Workflow in Nintex Workflow’ from the Workflow Settings option.



This will open up the Nintex Workflow designer. Drag and drop the workflow activity “Remove user from AD Group”.



The action will show the below warnings as some of the configuration values are missing.



From the drop down click on ‘Configure’.



The configuration page contains the details that will be used for removing the user from the AD group. In the LDAP path field click on the browse icon, it will open up the pop up for choosing the AD.



In order to remove the user we will have to specify the group name and the user login name. This will be dynamically read from the list. In the User form field, assign the ‘User’ List column.



In the Group form field, assign the ‘AD Group Name’ List column



After configuring the settings, the form will look like



Before publishing the workflow we have to set the workflow starting condition. Click on Workflow Settings.



Specify the Workflow title, description and set ‘Start When items are modified’ to ‘Yes’.



Let’s publish the workflow.



Make any final changes to the workflow title and description.



The workflow is being published.



Finally the workflow has been published.



Now let’s go to the configuration list and update the ‘Remove User?’ column to ‘Yes’. This will trigger the workflow. A column by the name of the workflow will be created in the list. It shows the status of the workflow and has been changed to ‘In Progress’.



After some time it will change to ‘Completed’ indicating the successful completion of the workflow.
.


Going back to the AD Group we can see that the user has been removed by the workflow.



Summary

Thus we have seen how to automate the decommissioning of users in the AD group using a SharePoint Configuration List and Nintex Workflow 2016.