Identity Management and Compliance Products
OverviewDownload EvaluationWatch DemoWhite PaperDocumentationDatasheetCase StudyPricing InformationRequest QuoteFreeware or Evaluation?Version HistoryDownload Freeware
SolutionsProducts A-Z
Microsoft Gold Certified Partner

Need More Features?
If you want to see additional features implemented in the product, we would love to hear. Click here to tell us.
Download Freeware Version of Inactive Users Tracker

Inactive Users Tracker

Many corporate security policies and compliance regulations require that Active Directory user accounts must be disabled after certain period of inactivity. This is a good practice; doing so keeps Active Directory secure and clean. For example, someone can create a user account, leave it untouched for many days, and then use it to perform malicious activity against an organization. Another example is employee retirement: User accounts must be disabled when an employee quits an organization, but in practice, IT departments are usually the last to know when somebody leaves. Also, most HR databases only keep information about the "primary" user account and know nothing about additional user accounts.

Inactive Users Tracker automates the management of inactive user accounts. The program periodically checks all user accounts in specified domains and reports all accounts inactive for more than specified number of days. Watch Password Expiration Notification DemoWatch Demo

Product features:

  • Checks all users and reports those that have been inactive for a specified number of days.
  • Automatically deactivates inactive user accounts, either by disabling or setting a random password, moving to another OU, or finally deleting such accounts (*).
  • Sends notifications to managers about their inactive direct reports (*).
  • Reports can be sent to IT auditors to ensure regulatory compliance (SOX, HIPAA, SAS-70, etc).

To detect inactivity, the tool checks the "lastLogon" and "lastLogonTimestamp" attributes of every user account, which represent the last time a user was authenticated by a specific DC. AD doesn't replicate these attributes; as a result, the values will be different on each DC. The Inactive Users Tracker handles this correctly: It queries all DCs in the domain and uses the most recent logon time, sometimes called the "true last logon".

Inactive Users Tracker is provided free of charge for unlimited use by organizations and individuals. The commercial version is available with the following features: notifications to managers, report customization, automatic account deactivation or deletion, and full technical support. We also provide free of charge technical support for the freeware version on the Support Forum.

Download EvaluationDownload Evaluation Request QuoteRequest a Quote Download freeware productDownload Freeware


To learn how to configure the product, please refer to the Quick Start Guide:
  Inactive Users Tracker Quick Start Guide

University, college, or school? Learn how to Automate Deactivation of Graduates' User Accounts.


Suggestion: Customers and evaluators who download this product usually also request the following products:



 
      All Solutions and Products You're in good company: See NetWrix Customers List

Copyright © 2010 NetWrix Corporation