RE: [ActiveDir] Disabling Inactive Users

Wed, 23 Feb 2005 04:46:11 -0800

Title: Disabling Inactive Users

James,

 

I would like to just expand a little on what Gil said about Javelina’s product.  http://www.Javelinasoftware.com AD Toolkit is the Hyena of reporting / bulk AD Administration tools.  It is extremely useful and has the ability to schedule the execution of reports and bulk administration.  It can also be customized relatively quickly and distributed to data administrators so they can only do certain AD functions and are limited to what they can modify on AD objects. 

 

One report that comes canned with the tool is a report that identifies accounts based on last login date.  With some work, I think you could automate a process that would report on this, and then you could us the report to bulk deactivate accounts and move them. 

 

I encourage everyone to evaluate the tool and make their own conclusions, but it is extremely powerful and useful.

 

Todd Myrick

MVP

 

 

From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 22, 2005 4:39 PM
To: [email protected]
Subject: RE: [ActiveDir] Disabling Inactive Users

 

AFAIK there's no GPO setting to do this. Most people run a script periodically or use a 3rd part tool like Javelina.

 

-g

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rogers, James
Sent: Tuesday, February 22, 2005 1:56 PM
To: [email protected]
Subject: [ActiveDir] Disabling Inactive Users

Is there a GPO setting (or some other path) to disable inactive users after a specified period of time?  In other words, I'd like to automatically disable Joe User if he has not logged on in more than 90 days.

Thanks,
James R. Rogers

Reply via email to