Solved

When is it ok to delete old/disabled user accounts?

Posted on 2006-07-18
3
896 Views
Last Modified: 2010-05-18
I have a client running SBS 2003 with a high employee churn rate.  
In my user list there are more users no longer with the company than are currently employed.  At this time all of those accounts are disabled.
1. How does this affect the number of CALS I have available for new employees?
2. What are the recommendations / best practices in regards to deleting these accounts?
     I would like to be able to delete them and clean things up...
Thanks for the help,

// John
0
Comment
Question by:johnbadams
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 6

Assisted Solution

by:Nzarth
Nzarth earned 75 total points
ID: 17136730
By the sounds of it you would already have exceeded you CALs limit if disabled accounts were taken into account.  So to answer your 1st question it has no effect.

To answer your second question it depends and varies from site to site.

Things to take into account is a) will those accounts ever be used again? b) Are their emails addresses still being used?

If the answer is no then you should be able to delete them with no problems....  
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 125 total points
ID: 17151877
1. If an account is disabled then it doesn't use up a CAL, but you can always check how many CAL's you've used by looking at Licensing in the Server Management Console.

2.  As for maintenance of a company with high turnover, I have a similar situation where I think we came up with a reasonable solution.  Generally, I'm in favor of disabling a former employee's account, migrating their files and emails to their supervisor and completely purging their account identity after 30 days (with the exception of SharePoint which we keep in tact because of the way it tags contributions to the site).

But when you have fairly high turnover in certain positions, I think it's best to use the same AD user account which is modified for the new employee.  For example, you would create a user account called "CustServ" using the default user template with the add-user wizard.  Then, let's say Cindy is the first person in that position.  You would do the following to the CustServ Account:

-- change the user logon name to Cindy (in both boxes on the Account tab).
-- ADD an additional SMTP email address for cindy@mycompany.com, keeping CustServ@mycompany.com as the Default.  
-- change the Email Alias to Cindy
-- change the password

Then, when Cindy leaves, you immediately disable the account if there isn't a replacement right away, or if there is, you change each of the four items listed above with the new user's name.  The only place I've found that this can cause an issue is with a user's local profile.  If this person will generally use the same computer, you can log onto that computer with the original CustServ account right after you make it and then that will create the user profile that will stick with each of these users (even though you will change their login name, the profile is tied to the SID, so it will still be CustServ).

Jeff
TechSoEasy
0
 

Author Comment

by:johnbadams
ID: 17155962
thank you both
0

Featured Post

MIM Survival Guide for Service Desk Managers

Major incidents can send mastered service desk processes into disorder. Systems and tools produce the data needed to resolve these incidents, but your challenge is getting that information to the right people fast. Check out the Survival Guide and begin bringing order to chaos.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

697 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question