Group together disabled Windows accounts in a folder / container
Posted on 2014-01-20
We have a number of disabled Windows (domain as well
as local) accounts. How can we move/group these accounts
to a container/folder in the server?
Is there any way to prevent Wintel administrator from
accidentally enabling those accounts back? Or is it possible
to set an audit event on this folder such that if there's
changes to it (or those accounts are re-enabled back),
it will be logged in Event Viewer with possibly an alert
I'm trying to fulfill IT security's requirement.