group policy to disable user account

  • Thread starter Thread starter sanjay kadam
  • Start date Start date
S

sanjay kadam

Hi

Is there any group policy to disable user account if user account is not in
use for 15 days.

Rgds
san
 
No, you can't do that through GP. There's really no easy way to do that
without running some kind of process on your DCs (assuming they are AD
accounts you're talking about) that check last logon times.

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
Group Policy Management solutions at http://www.sdmsoftware.com
 
Hi,

sanjay said:
Is there any group policy to disable user account if user account
is not in use for 15 days.
Click to expand...

No. You have to script it and run it as a scheduled task.
Every Account has a LastLogon/LastLogon flag.
Take a look at dsquery and/or dsget to read the flag and disable
the account, which lastlogoff flag is older than your disired time
by using dsmod

Mark
 
Back
Top