Werk #19477: LDAP: User Synchronize for Active Directory can unlock users

Component	Setup
Title	LDAP: User Synchronize for Active Directory can unlock users
Date	Mar 17, 2026
Level	Trivial Change
Class	Bug Fix
Compatibility	Compatible - no manual interaction needed
Checkmk versions & editions	2.6.0b1 Not yet released Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Ultimate MT 2.5.0b2 Not yet released Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Ultimate MT 2.4.0p25 Not yet released Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Ultimate MT 2.3.0p46 Not yet released Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Ultimate MT

User synchronization with an LDAP connection using Active Directory manages user login status based on the AD account settings. Previously, if a user’s login had been disabled in Checkmk because their AD account was marked as "Account is disabled," this status would not be updated during subsequent synchronizations.

As a result, even after the user’s AD account was enabled again, their login in Checkmk remained disabled.

As of this werk, user synchronization with Active Directory will correctly update for users whose account have been reactivated in AD.

To the list of all Werks