Inactive Users & Computers

Question

I am interested in using the built-in tasks for disabling inactive users and computers but wanted to get a better understanding of what these functions are doing.

When checking for inactive computers what attributes are checked? pwdLastSet & whenChanged?

When checking for inactive users what attributes are checked? Lastlogon or LastLogonTimestamp? If LastLogon is used, will each DC be contacted?

Thanks

Answer 1

Hello,

The following properties are used to check if a user or computer is inactive:

• Last-Logon-Timestamp
• Password Last Set

Also, Adaxes tries to ping the computers that appear to be inactive for a long time based on the properties.

Comments

If the domain functional level is less than Win2003 Native, will LastLogon be used instead of LastLogonTimestamp?

Adaxes tries to ping the computers that appear to be inactive for a long time based on the properties.

Also, can you provide more detail on the ping routine? After what period of inactivity will Adaxes start to ping a computer to determine it's status? Were is the metadata for the online/offline status stored?

Thanks

---

If the domain functional level is less than Win2003 Native, will LastLogon be used instead of LastLogonTimestamp?

Yes.

Also, can you provide more detail on the ping routine? After what period of inactivity will Adaxes start to ping a computer to determine it's status?

It all depends on the settings of the If is inactive <period> condition. By default, in the Scheduled Tasks for inactive computers and users, it is set to 12 weeks, so Adaxes will ping a computer if Last-Logon-Timestamp / Last Logon and Password Last Set of the computer are older than 12 weeks.

Were is the metadata for the online/offline status stored?

Take a closer look at the Scheduled Tasks. If an account is inactive for longer than the specified time period, the Scheduled Tasks will update the When Marked Inactive property of the user/computer. It is a virtual property that is stored on Adaxes backend.