How to Recover a USB device after a user has been removed from AD and exceed the lease period in the Dell Security Management Server web console

Affected Products:

• Dell Security Management Server
• Dell Data Protection | Enterprise Edition

Affected Versions:

• v8.0 to 9.1.5

Not Applicable

When this occurs, you must have a DBA run these codes EXACTLY:

Confirm that the user is not set to removed=0 by running Query 1.

1. Query #1
   1. Select * from entity where DisplayName like '%USER UPN%'
   2. Replace USER UPN with the upn of the decommissioned user.
   3. This should return the selected user in question that has been removed from your AD. Confirm Removed = 1 then run the following:
2. Query #2
   1. UPDATE Entity Set Removed=0 Where DisplayName like '%USER UPN%' and EntityType=1
   2. Go to the web console and log in as a Dell Data Protection | Encryption administrator.
   3. Go to the user tab and look up the *USER UPN*.
   Note: The * is a contain variable for searching.
   4. Click the Shielded Devices icon next to the USER UPN.
   5. Locate the machine where the USB device originally got encrypted and click Recover.
   6. Enter the Device Code that the USB device provides, and press Generate Access Code.
   7. Enter Access Code on USB UI to finish recovery.
   8. Once recovery has been successful, have your DBA perform the following:
3. Query #3
   1. UPDATE Entity Set Removed=1 Where DisplayName like '%USER UPN%' and EntityType=1

This removes the inactive user from the database.

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.