Find inactive accounts (users or computers)

Inactive accounts can be used for data theft and manipulation without being detected. Since most inactive accounts are remnants of past employees, they are often a symptom of a communication problem between HR and IT.

ARM displays all inactive accounts in Active Directory. You can delete or deactivate old and redundant accounts.

1. Log in to the Access Rights Manager application.

2. Click Dashboard i the toolbar.

3. Under Reporting, click Inactive accounts.

   

4. Configure the inactive accounts report.

   

   1. In the Title and Comment fields, enter a report title and add a comment.

   2. In the Objects box, define the range of the report.

   3. Maximize Settings and define the desired report settings.

   4. Click Start to generate the report.

5. Review the data in the report. If you are using historical scan data, there may be differences in the days since the last login.

   

See the following sections for more information:

• Remove a user and his permissions

• "Soft" delete a user account

• Deactivate a user account

• Identify inactive accounts  (web client)

• Deactivate user accounts in bulk (web client)