AD Security Group Lifetime

[mikeruddell2]

Has anyone found a way of expiring AD Security Group membership?

 

Looking to find a way of adding someone to a remote access group for a set amount of time only without having to set loads of calendar reminders to remove access.

 

If anyone knows a way of doing this without having to install a third party program that would be great!

 

Mike.

[Eric]

This is only half helpful. Can you use the "at" command and dsmod? I used to do something like this for deleting files in a couple of weeks time. Maybe something like:

at 12:00 /next:thursday dsmod group "cn=schema admins,cn=users,dc=example,dc=microsoft,dc=com" -rmmbr "cn=mary baker,cn=users,dc=example,dc=microsoft,dc=com"

 

 

Only half helpful because I haven't tried this.