Ex Employee

  • Thread starter Thread starter Pat
  • Start date Start date
P

Pat

I'm running AD with two DC's with 100 W2K pro workstations. when we
have an employee we are about to let go I want to disable access for
all resources for his account. I tried with a test account to disable
the account but untill I log off I still have access to email and
shares etc. I forced replication on the dc's. but no good. I could use
the shutdown command on the pc, but I am looking for a more subtle way
of doing it. any idea's?
 
The user will use the current credentials until they
logoff. Any other machine they have connected to will
cache the users credentials.
Best to go logoff the user from the domain.
Steve
Click to expand...
how do I log them off remotely?
 
In GP you can define force log off when user's logon hours expire. enable
this and then before you employee becomes exemployee set the logon hours to
that time and then when the employee if terminated it will log them off.
You can also schedule the user to expire on that date if you know in advance
and the user would not be able to logon that morning. just some thoughts

HTH

Paul McGuire
 
Back
Top