topic Re: Service Accounts in Midwest User Group

Service Accounts

matthew_pahls — Mon, 08 Aug 2022 16:50:11 GMT

At what point do you consider an account dormant and disable it? What are you using to determine if an account is not being used?

Re: Service Accounts

mkscarberry — Mon, 08 Aug 2022 18:33:29 GMT

In AAD and AD, we check for last logged in. If >90 days, we disable the account. If after 90 days no one claims it, we move the account into OU=Disabled. After 366 days in OU=Disabled, we purge it.

Re: Service Accounts

aparker81 — Wed, 21 Jun 2023 14:46:00 GMT

Agreed. We take the same approach.