Solved

When is it ok to delete old/disabled user accounts?

Posted on 2006-07-18
3
892 Views
Last Modified: 2010-05-18
I have a client running SBS 2003 with a high employee churn rate.  
In my user list there are more users no longer with the company than are currently employed.  At this time all of those accounts are disabled.
1. How does this affect the number of CALS I have available for new employees?
2. What are the recommendations / best practices in regards to deleting these accounts?
     I would like to be able to delete them and clean things up...
Thanks for the help,

// John
0
Comment
Question by:johnbadams
3 Comments
 
LVL 6

Assisted Solution

by:Nzarth
Nzarth earned 75 total points
ID: 17136730
By the sounds of it you would already have exceeded you CALs limit if disabled accounts were taken into account.  So to answer your 1st question it has no effect.

To answer your second question it depends and varies from site to site.

Things to take into account is a) will those accounts ever be used again? b) Are their emails addresses still being used?

If the answer is no then you should be able to delete them with no problems....  
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 125 total points
ID: 17151877
1. If an account is disabled then it doesn't use up a CAL, but you can always check how many CAL's you've used by looking at Licensing in the Server Management Console.

2.  As for maintenance of a company with high turnover, I have a similar situation where I think we came up with a reasonable solution.  Generally, I'm in favor of disabling a former employee's account, migrating their files and emails to their supervisor and completely purging their account identity after 30 days (with the exception of SharePoint which we keep in tact because of the way it tags contributions to the site).

But when you have fairly high turnover in certain positions, I think it's best to use the same AD user account which is modified for the new employee.  For example, you would create a user account called "CustServ" using the default user template with the add-user wizard.  Then, let's say Cindy is the first person in that position.  You would do the following to the CustServ Account:

-- change the user logon name to Cindy (in both boxes on the Account tab).
-- ADD an additional SMTP email address for cindy@mycompany.com, keeping CustServ@mycompany.com as the Default.  
-- change the Email Alias to Cindy
-- change the password

Then, when Cindy leaves, you immediately disable the account if there isn't a replacement right away, or if there is, you change each of the four items listed above with the new user's name.  The only place I've found that this can cause an issue is with a user's local profile.  If this person will generally use the same computer, you can log onto that computer with the original CustServ account right after you make it and then that will create the user profile that will stick with each of these users (even though you will change their login name, the profile is tied to the SID, so it will still be CustServ).

Jeff
TechSoEasy
0
 

Author Comment

by:johnbadams
ID: 17155962
thank you both
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the event you manage a Small Business Server 2003, and you are audited for PCI compliance, there are several changes you must make in order to pass the audit. I can take no credit for discovering any of these fixes or workarounds, but there is no…
Introduction At 19:33 (UST) on Tuesday 21st September the long awaited email arrived with the subject title of “ANNOUNCING THE AVAILABILITY OF WINDOWS SBS 7 PREVIEW”.  It was time to drop whatever I was doing and dedicate as much bandwidth as possi…
Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

28 Experts available now in Live!

Get 1:1 Help Now