Personally I haven't seen a GPO for this but I'd like to hear of one if available.
On my site I/we wrote an administrative script to handle this task that basically scours the directory and spits out the accounts that haven't been used on any DC in more than X days. Because of our system processes (don't ask) we send that to the account team who merges it with other systems and spits back the list they deem valid to be disabled. Another process then handles the disabling of the accounts and spits out a report via email for archival and reporting purposes. Not a lot of code, but it had to work with the processes that couldn't be changed. Al -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rogers, James Sent: Tuesday, February 22, 2005 3:56 PM To: [email protected] Subject: [ActiveDir] Disabling Inactive Users Is there a GPO setting (or some other path) to disable inactive users after a specified period of time? In other words, I'd like to automatically disable Joe User if he has not logged on in more than 90 days. Thanks, James R. Rogers List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
