Forum

Ultimate Windows Security Forum » IT Audit » Active Directory » AD accounts

AD accounts Expand / Collapse
Rate Topic
Display Mode
Topic Options
Author
Message
tommymilos
Posted 5/13/2011 1:50:09 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 5/13/2011 11:32:16 AM
Posts: 1, Visits: 0
What is the difference between disableing and expiring an active directory user account when an employee is terminated? Our auditor says we have to disable it.
Post #691
RandyFranklinSmith
Posted 5/13/2011 1:54:49 PM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 326, Visits: 0
both have the same effect.  If the account is expired there is no way to logon and use the account.  If the account is disabled there is no way to logon and use the account.

Expiration happens automatically on a set date. 

Disabling is done manually and takes effect immediately.

Post #692
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 9:34am