group policy to disable user account

[sanjay kadam]

Hi

Is there any group policy to disable user account if user account is not in
use for 15 days.

Rgds
san

 

[Darren Mar-Elia \(MVP\)]

No, you can't do that through GP. There's really no easy way to do that
without running some kind of process on your DCs (assuming they are AD
accounts you're talking about) that check last logon times.

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
Group Policy Management solutions at http://www.sdmsoftware.com

 

[Mark Heitbrink [MVP]]

Hi,

Is there any group policy to disable user account if user account
is not in use for 15 days.

No. You have to script it and run it as a scheduled task.
Every Account has a LastLogon/LastLogon flag.
Take a look at dsquery and/or dsget to read the flag and disable
the account, which lastlogoff flag is older than your disired time
by using dsmod

Mark