Enhancement to inactive accounts when never accessed
I am suggesting an enhancement to the current Inactive accounts option. If an account is created but never accessed, it never becomes active and the counter for inactivity never begins. Those accounts then remain enabled and increase the attack surface.
I would like to propose that the Inactive check look at the last accessed date, and if blank, looks at the created date, and then applies the action using the same value as set for Inactive, disabling and notifying of any accounts disabled as a result of this.
Regards,
Tim
1
vote
Anonymous
shared this idea
Hello Tim,
Thank you for sharing you idea with us to improve support for inactive accounts. It will be considered for future versions.
Thanks again,
Arron