Autamatic Disable of Accounts in AD

[Garyd53]

Hi Guys,

 

Is there a software or script out there that will automatically disable a user account if not used for a specified period of time. Please let me know if there is such a thing as manual disabling is very time consuming.

 

I would really appreciate some help on this

 

Thanks

[Michael]

No I don't believe there is such an option by default, but the nearest option I can think of is you can set a specific date when the account expires and I believe the default behaviour is to disable the account.

[sparkeh]

Yeah you could write a script using the Last-Logon-Timestamp Attribute which gives you last time someone logged in. Note that if you are on Server 2000 this is not replicated across DCs so if you have more than one DC you need to query all of them. 2003 replicates this info though.

 

Probably easier to have a look at something like this AD manager

[Garyd53]

Thanks for your replies AD manager plus seems like the way forward here. can you let me know roughly how much it costs?

[plexer]

The Dovestones software can find the true last login of an account and you can then disable them I think it has a command line as well.

 

Ben

[tumbleweed]

Like it says - I've used it to identify & disable redundant machine a/c's - also works on users.