Guest Starbuck Posted June 5, 2008 Posted June 5, 2008 The PHB wants me to lock user accounts after 90 days of inactivity. Seems like it should be do-able, but I'm not having much luck with google this morning, can some point me in the right direction? Much appreciated. *$ aa#2290
Guest Richard Mueller [MVP] Posted June 5, 2008 Posted June 5, 2008 Re: Account lockout - inactivity "Starbuck" <Starbuck@BogusDomain.com> wrote in message news:21bg4495hlih7kl7l2g3tn17aqqltetm1l@4ax.com... > > The PHB wants me to lock user accounts after 90 days of inactivity. > > Seems like it should be do-able, but I'm not having much luck with > google this morning, can some point me in the right direction? > > Much appreciated. > > > *$ > > aa#2290 You really want to disable old accounts rather than lock out. You can use Joe Richards' free oldcmp utility for this: http://www.joeware.net/freetools/tools/oldcmp/index.htm Yes, it was originally written for computer accounts, but it works equally well with user accounts. Check the usage notes. There is a -users switch and a -disable switch. You can also delete the stale accounts. The tool will report on what it would do before you run it for real. -- Richard Mueller MVP Directory Services Hilltop Lab - http://www.rlmueller.net --
Recommended Posts