Account Inactivity

I am trying to find a tool or 3rd party software that will automatically disable an network account in Active Directory for any user after 90 days of inactivity. Is there a tool and / or software out there than can do this?
MJDevosAsked:
Who is Participating?
 
followingConnect With a Mentor Commented:
MJDevos,

R L Mueller has an excellent site with a vbs script that queries all domain controllers within a domain to find the last logon date/time of all users in that domain.  I'm sure you could add a bit to the end of the script that would compare the last logon date/time with the current date/time to see if 90 days has passed and disable the account if so.  The Technet script center has a sample script for how to disable an account with vbscript.

Here's the link to R L Mueller's script:

http://www.rlmueller.net/Last%20Logon.htm

Hope this helps,
-jdm
0
 
MJDevosAuthor Commented:
Currently does not run for me at the moment, have to play around with for a bit to see what and why it will not work. Get the following error....

"The Procedure Entry Point DoOpenPipeStream could not be located in teh dynamic Link Library ScrRun.dll"
0
 
followingCommented:
It sounds like you need the latest version of Windows Script installed:

http://msdn.microsoft.com/library/default.asp?url=/downloads/list/webdev.asp

-jdm
0
 
MJDevosAuthor Commented:
Downloaded and Installed and the VB Script ran, this will at least give me the information that I needed. Thanks.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.