RE: NT 4.0 domain account disabling

From: Jeff Qiu (jefffqiu@online.microsoft.com)
Date: 03/10/03 

From: jefffqiu@online.microsoft.com (Jeff Qiu)
Date: Mon, 10 Mar 2003 05:32:51 GMT

Hi Giovanni,

There is no such policy or tool in Windows NT4 or Windows 2000 now that
supports this solution directly.

You may need to apply this solution by coding a program to filter out
never-logged-on-100/365-days users from event log and use the "net user"
command line to disable/remove them.

Best Regards,

Jeff Qiu
jefffqiu@online.microsoft.com
Online Support Professional
Microsoft Corporation

This posting is provided Ħ°AS ISĦħ with no warranties, and confers no
rights.

--------------------
>Content-Class: urn:content-classes:message
>From: "giovanni" <giovanni.idone@hp.com>
>Sender: "giovanni" <giovanni.idone@hp.com>
>Subject: NT 4.0 domain account disabling
>Date: Fri, 7 Mar 2003 06:32:27 -0800
>microsoft.public.security
>
>Did anyone ever enable a domain NT 4.0 policy, or a
>script, which could disable a domain account 100 days
>after last logon? And similarly, another one able to
>delete same account if not logged on after 1 year?
>Thank you
>Best regards
>Giovanni
>

Relevant Pages

  • Re: Group Policy "Caching"
    ... Since the AD based GPOs define the requirements that must ... allow a domain account to be used without it being subjected ... SCE client engine and its storage of the policy information ... > In my Local Policy I have "Hide Screen saver tab" = Disabled ...
    (microsoft.public.windows.group_policy)
  • Logon local to W2k workstation using domain account
    ... I have a win2k workstation which is a member of a domain on a home ... use a domain account to log on locally (logging into the domain works ... Opening the account policy in the workstation's local security policy ...
    (microsoft.public.win2000.security)
  • Number of cached logons
    ... The situation has always been that once a user logs on to an NT/2K/XP ... machine with a domain account, that user can remove the computer from the ... Group Policy exposes the registry setting for this under Local Security ... Policy in "Interactive Logon: Number of cached logons......". ...
    (microsoft.public.win2000.group_policy)
  • Re: Pasword problem
    ... If it's domain account, installing a new server won't help. ... Check the Default domain Policy GPO. ... English blog: http://lordoftheping.blogspot.com ...
    (microsoft.public.windows.server.general)
  • RE: SIDs instead of the user friendly names
    ... The policy is set under Computer ... Options: Secure channel:Require strong (Windows 2000 or later) session key. ... I have a two way trust set up with a Windows 2003 AD and a Windows NT4 ...
    (microsoft.public.windows.server.migration)
Quantcast