Active Directory (live)

Check id p.ad

What it checks

Looks the person up in AD right now (not the last sync): are they linked, still in scope, and enabled?

Check	lchen@corp.example is not linked to an AD account.	Windows sign-in and file shares will not work for them.
Problem	CORP\lchen is no longer in AD scope (not a member of AI-Users).	Their AI keeps working until the next sync or sign-in.
Problem	CORP\lchen is disabled in Active Directory.	Same.
OK	Live in AD as CORP\lchen, enabled, in 4 groups: HR-Partners, ...	Fine.

Not linked: in Active Directory Users and Computers, give their account this email in E-mail (the mail attribute) or as their UPN, and add them to the scope group. Then Identity → Sync now.
Left on purpose? Identity → Active Directory → Sync now cuts their AI off at once.

Command line

Get-ADUser lchen -Properties mail, Enabled, MemberOf | Select-Object mail, Enabled, MemberOf

Still stuck? Click Copy report on the Health check and send it to support@acutisgo.com. · Acutis Gate · Guides