Business Unit for Inactive Accounts

Question

I'm trying to make a BU to capture user accounts that haven't logged in to AD in 60 days. I have a BU with the following Query, but it isn't working

(&(sAMAccountType=805306368)(Last-Logon-TimeStamp<="%datetime,-2M%"))

Any thoughts? I know I can use a script, but I just thought a BU made sense. This way I can automatically disable those accounts with a scheduled task.

PS. I know I can do this with a script. I just thought it would be easy to do with a BU

Thx!

--Joel

Answer 1

Hello Joel,

No, you can't build a Business Unit that would include disabled user accounts because currently it is impossible to build a LDAP filter that includes the current date.

By the way, there is a built-in Scheduled Task for handling inactive users called Inactive User Deleter. For more information, have a look at the following tutorial: Automatically Deprovision Inactive AD Users.