- What's the danger of an inactive account?
- How many days inactive account should be disabled?
- What is considered inactive user?
What's the danger of an inactive account?
Inactive accounts or accounts that have never logged in to a machine are also known as “stale” user accounts. Stale accounts pose a security risk to organizations. Each one of these accounts offers a malicious actor an opportunity to gain access to resources.
How many days inactive account should be disabled?
The inactive accounts must be disabled within 15-60 days to prevent any further security threats, using the commands given below: To disable the user accounts, run the following command in “Command Prompt”.
What is considered inactive user?
Inactive User means a User that meets one or both of the following conditions and such condition is intended to remain permanent: (a) the User has been disabled by setting the attribute to “LoginDisabled”; or (b) no login to the User has occurred for at least one hundred and twenty (120) days.