Disable or delete active directory accounts

You can disable a user or computer account in Active Directory through the Active Directory Users & Computers graphical snap-in (ADUC). To do this, find the user account in the console, right-click on it and select Disable Account.

1. Should you delete Active Directory accounts?
2. What happens when you disable an account in Active Directory?
3. What is the difference between disable account and delete account?
4. Is disable the same as delete?

Should you delete Active Directory accounts?

Removal of inactive accounts is essential for the security of the Active Directory. However, it is better to keep such accounts disabled for some time before deleting them. When employees leave the organization or when they take a long to leave, it is recommended to disable their user accounts.

What happens when you disable an account in Active Directory?

If you disable a user, the Active Directory object remains untouched together with the mailbox data and properties(including forwarding settings and full access), but you will not be able to access any mailbox data directly, using that user credentials.

What is the difference between disable account and delete account?

Tip: The main difference between deactivating and deleting a user is that a deactivated user can be reactivated while deleting a user is permanent.

Is disable the same as delete?

Uninstalling an app will remove it entirely from your phone. Disabling an app will remove it from the apps screen and stop it from running in the background.