Today’s Free Tool of the Day, NetWrix Inactive Users Tracker, periodically checks all user accounts in specified domains and reports all accounts inactive for more than specified number of days, streamlining the management and deactivation of AD user accounts deemed inactive for more than the specified number of days. It is best practices to disable AD accounts when an employee quits an organization or a student graduates college, but in practice, IT departments are usually the last to know when somebody leaves, and improper user management opens up serious potential security holes for infrastructure breaches. The tool sends detailed reports to administrators regarding all inactive accounts, which in turn, can be sent to auditors as detailed audit trail. The solution also deactivates all inactive user accounts, either by disabling or setting a random password, moving to another OU, or simply deleting such accounts.
How are you disabling inactive accounts within your environment?