Active Directory: delete vs. disable departed employees

Posted by Matt Rogish on Server Fault See other posts from Server Fault or by Matt Rogish
Published on 2009-09-10T15:18:32Z Indexed on 2010/03/16 15:51 UTC
Read the original article Hit count: 427

Filed under:

active-directory

|

cleanup

|

purge

|

delete

|

policy

When an employee leaves your organization, do you delete or disable their Active Directory account? Our SOP is to disable, export/purge the Exchange mailbox, and then after "some time" has elapsed (usually quarterly), delete the account.

Is there any need for that delay? After exporting and purging their mailbox, why shouldn't I delete the account right then and there?

© Server Fault or respective owner

Related posts about active-directory

Can't join OS X Mavericks to AD Domain

as seen on Server Fault - Search for 'Server Fault'
I'm attempting to join an OS X Mavericks (10.9) client to a Windows Server 2008 Active Directory domain, however the bind fails with this error in the OS X client's system.log: Oct 24 15:03:15 host.domain.com com.apple.preferences.users.remoteservice[5547]: -[ODCAddServerSheetController handleOtherActionError:… >>> More
Retrieve user details from Active Directory using SID

as seen on Server Fault - Search for 'Server Fault'
Hi, How can I find a user in my AD when I have his/her SID. I don't want to rely on other attributes, since I am trying to detect changes to these. Example: I get a message about a change to user record containing: Message: User Account Changed: Target Account Name: test12 Target… >>> More
Retrieve user details from Active Directory using GUID

as seen on Server Fault - Search for 'Server Fault'
Hi, How can I find a user in my AD when I have his/her GUID. I don't want to rely on other attributes, since I am trying to detect changes to these. >>> More
Retrieve user details from Active Directory using GUID [closed]

as seen on Super User - Search for 'Super User'
Hi, How can I find a user in my AD when I have his/her GUID. I don't want to rely on other attributes, since I am trying to detect changes to these. >>> More
Office365 DirSync Active Directory Integration

as seen on Server Fault - Search for 'Server Fault'
I am preparing to deploy Office365 for my organization. We have an on premise Active Directory Domain Controller (Windows Server 2012 R2). We would like to leverage our Active Directory for: automatic user provisioning in Office365, and password synchronization, using the DirSync tool. Our Active… >>> More

Related posts about cleanup

C++/CLI managed thread cleanup

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi. I'm writing a managed C++/CLI library wrapper for the MySQL embedded server. The mysql C library requires me to call mysql_thread_init() for every thread that will be using it, and mysql_thread_end() for each thread that exits after using it. Debugging any given VB.Net project I can see at least… >>> More
How do I guarantee cleanup code runs in Windows C++ (SIGINT, bad alloc, and closed window)

as seen on Stack Overflow - Search for 'Stack Overflow'
I have a Windows C++ console program, and if I don't call ReleaseDriver() at the end of my program, some pieces of hardware enter a bad state and can't be used again without rebooting. I'd like to make sure ReleaseDriver() gets runs even if the program exits abnormally, for example if I hit Ctrl+C… >>> More
TPerlRegEx.CleanUp() Bugfix

as seen on Regular-Expressions.info - Search for 'Regular-Expressions.info'
A bug in recent versions of TPerlRegEx caused it to crash when reusing a TPerlRegEx instance with another regular expression because two pointers weren't set to nil after freeing them. >>> More
Cleanup datastore

as seen on Super User - Search for 'Super User'
Hi folks!, I'm trying to find "orphaned" files in my datastore, not only from orphaned vms but also other files (ie. sample files, isos, anything). Is there any powershell script or something to do that? (find -mtime works, but it's not the right way) I'm using ESX3.5 Thanks! >>> More
An XEvent a Day (15 of 31) – Tracking Ghost Cleanup

as seen on SQL Blog - Search for 'SQL Blog'
If you don’t know anything about Ghost Cleanup, I recommend highly that you go read Paul Randal’s blog posts Inside the Storage Engine: Ghost cleanup in depth , Ghost cleanup redux , and Turning off the ghost cleanup task for a performance gain . To my knowledge Paul’s posts are the only things… >>> More