- Dynamically Disabling User Accounts
- Posted by Paul Fritzler on February 24th, 2004
Is there a way through Active Directory that I can have
user accounts that have been in-active for "x" amount of
time expire dynamically? It seems like I have seen
reference to this before.
Thanks in advance!
Paul
- Posted by BS on February 25th, 2004
Paul-
If you get the properties of a user account, go to the Account tab. Toward
the bottom, you'll see "End of:". Set the date and the account will expire
at the end of that date...
BS
"Paul Fritzler" <anonymous@discussions.microsoft.com> wrote in message
news:0e1001c3fb36$358043b0$a001280a@phx.gbl...
- Posted by BS on February 25th, 2004
Paul-
I think I misread your message. I wasn't thinking dynamically.. I was
thinking of disabling a user account at a known date in the future.
Since the date is unknown, you'd have to come up with some metric to
determine what constitutes an inactive account. Would it be an account that
hadn't logged in for a certain amount of time? Or, would it be something
else? Once the metric is determined, a VBScript could be put together that
would check for the metric once a day or once a week. If found, the script
could disable the account and send an e-mail to you or a group notifying you
of the action(s) taken.
BS
"BS" <bs_wtf_123@yahoo.com> wrote in message
news:%239UGqwz%23DHA.212@TK2MSFTNGP12.phx.gbl...
- Posted by Ulf B. Simon-Weidner [MVP] on February 26th, 2004
Paul Fritzler says...
you'll have to write a script to do this and run it every once in a while
(create a task).
The following article will give you an idea on how to do it:
http://mcpmag.com/columns/article.asp?editorialsid=660
Gruesse - Sincerely,
Ulf B. Simon-Weidner