Disabling User Accounts After Inactivity

Is there a feature in Active Directory that can be set to disable user
accounts after an account has been inactive for a certain amount of time?
Currently we run scripts to identify accounts true last logon date and then
we disable them. Can this be set up automatically through Active Directory

Richard
Fri Jul 11 13:09:20 PDT 2008


"Julio Quiroz" <Julio Quiroz@discussions.microsoft.com> wrote in message
news:ADADCA8E-1F86-4A11-AE8C-DC689F93017A@microsoft.com...
> Is there a feature in Active Directory that can be set to disable user
> accounts after an account has been inactive for a certain amount of time?
> Currently we run scripts to identify accounts true last logon date and
> then
> we disable them. Can this be set up automatically through Active
> Directory

There is nothing in AD to facilitate this. However, it should help to use
Joe Richards' oldcmp utility:

http://www.joeware.net/freetools/tools/oldcmp/index.htm

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--

Jorge
Mon Jul 14 01:06:04 PDT 2008

for provisioning/deprovisioning you have a look at IIFP or MIIS


--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Julio Quiroz" <Julio Quiroz@discussions.microsoft.com> wrote in message
news:ADADCA8E-1F86-4A11-AE8C-DC689F93017A@microsoft.com...
> Is there a feature in Active Directory that can be set to disable user
> accounts after an account has been inactive for a certain amount of time?
> Currently we run scripts to identify accounts true last logon date and
> then
> we disable them. Can this be set up automatically through Active
> Directory

Jorge
Mon Jul 14 01:12:41 PDT 2008

and both are from Microsoft

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Jorge de Almeida Pinto [MVP - DS]"
<SubstituteThisWithMyFullNameSeparatedByDots@gmail.com> wrote in message
news:eHoIAiY5IHA.4448@TK2MSFTNGP05.phx.gbl...
> for provisioning/deprovisioning you have a look at IIFP or MIIS
>
>
> --
>
> Cheers,
> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>
> # Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #
>
> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
> ------------------------------------------------------------------------------------------
> * How to ask a question --> http://support.microsoft.com/?id=555375
> ------------------------------------------------------------------------------------------
> * This posting is provided "AS IS" with no warranties and confers no
> rights!
> * Always test ANY suggestion in a test environment before implementing!
> ------------------------------------------------------------------------------------------
> #################################################
> #################################################
> ------------------------------------------------------------------------------------------
> "Julio Quiroz" <Julio Quiroz@discussions.microsoft.com> wrote in message
> news:ADADCA8E-1F86-4A11-AE8C-DC689F93017A@microsoft.com...
>> Is there a feature in Active Directory that can be set to disable user
>> accounts after an account has been inactive for a certain amount of time?
>> Currently we run scripts to identify accounts true last logon date and
>> then
>> we disable them. Can this be set up automatically through Active
>> Directory
>