Set grace login & revoke for inactivity

[Guest]

Hi,

1. How to set grace login ?
2. Can system revoke the account automatically if the account was inactive
for a pre-defined period ?

Thanks

 

[Pegasus \(MVP\)]

Hi,

1. How to set grace login ?
2. Can system revoke the account automatically if the account was inactive
for a pre-defined period ?

Thanks

1. What's a "grace login"?
2. Are you operating in a domain environment or on stand-alone PCs?

 

[Guest]

1. A grace login is when a user's password has expired and they are allowed
several "Grace" logins before they are forced to change their password or
have their account locked.

2. In Domain environment

 

[Pegasus \(MVP\)]

1. A grace login is when a user's password has expired and they are allowed
several "Grace" logins before they are forced to change their password or
have their account locked.

2. In Domain environment

I'm not aware of any "grace" setting. Win2000 gives you opposite: You
can warn users x days before their password expires. They are supposed
to change it when they get the warning rather than wait until past the
expiry date.

Domain accounts can be set to expire by a certain date but I don't think
there is a setting that revokes the account after a pre-defined period of
inactivity. However, this is fairly easy to script, by using the command
"net use %UserName%" to determine the date of the last logon, then
the same command to suspend the account if necessary. The script
should be invoked on the domain controller once each day by the
Task Scheduler.