Tech Support > Operating Systems > Windows 2003 > Dynamically Disabling User Accounts
Dynamically Disabling User Accounts
Posted by Paul Fritzler on February 24th, 2004


Is there a way through Active Directory that I can have
user accounts that have been in-active for "x" amount of
time expire dynamically? It seems like I have seen
reference to this before.

Thanks in advance!

Paul

Posted by BS on February 25th, 2004


Paul-

If you get the properties of a user account, go to the Account tab. Toward
the bottom, you'll see "End of:". Set the date and the account will expire
at the end of that date...

BS


"Paul Fritzler" <anonymous@discussions.microsoft.com> wrote in message
news:0e1001c3fb36$358043b0$a001280a@phx.gbl...


Posted by BS on February 25th, 2004


Paul-

I think I misread your message. I wasn't thinking dynamically.. I was
thinking of disabling a user account at a known date in the future.

Since the date is unknown, you'd have to come up with some metric to
determine what constitutes an inactive account. Would it be an account that
hadn't logged in for a certain amount of time? Or, would it be something
else? Once the metric is determined, a VBScript could be put together that
would check for the metric once a day or once a week. If found, the script
could disable the account and send an e-mail to you or a group notifying you
of the action(s) taken.

BS


"BS" <bs_wtf_123@yahoo.com> wrote in message
news:%239UGqwz%23DHA.212@TK2MSFTNGP12.phx.gbl...


Posted by Ulf B. Simon-Weidner [MVP] on February 26th, 2004


Paul Fritzler says...

you'll have to write a script to do this and run it every once in a while
(create a task).

The following article will give you an idea on how to do it:
http://mcpmag.com/columns/article.asp?editorialsid=660

Gruesse - Sincerely,

Ulf B. Simon-Weidner


Similar Posts