- Checks all users and reports those that have been inactive for a specified number of days.
- Automatically disables inactive user accounts (*).
To detect inactivity, the tool checks the "lastLogon" attribute of every user account, which represents the last time a user was authenticated by a specific DC. AD doesn't replicate this attribute; as a result, the lastLogon value will be different on each DC. Inactive Users Tracker handles this correctly: It queries all DCs in the domain and uses the most recent logon time, also called the "true last logon".
Inactive Users Tracker is provided free of charge for unlimited use by organizations and individuals.
Inactive Users Tracker (Freeware and Commercial) - NetWrix Corporation