I’d like to create new users in a specific OU and have them set as disabled until I move them into their permanant OU. Then after being in permanant OU, the normal “enable account” rules would apply and enable/disable the account as specified.
My idea was to create two different environments that only see a specific OU, but I’m concerned that when a new user is moved out of the “provision” OU, that will result in an additional user being created since the environment wouldn’t see the other OU where it lives now.
Is there a proper way to do this?