so why write an article about this? If you don't know how to disable or delete an account you should not be using the system at all.
May as well tell them how to copy a file from one folder to another next...
PS: Sorry if this sounds harsh but I don't see the point here.
Discussion on:
View:
Show:
Do you think all peoples born to know this!?
I disagree with you and thanks for the artcile.
Al,
PMP, MCSE, CCVP
I disagree with you and thanks for the artcile.
Al,
PMP, MCSE, CCVP
No, people aren't born to know this.
People are trained to know this. Being an MCSE you should know this.
People are trained to know this. Being an MCSE you should know this.
I agree, I think it is basic admin, but I don't think the slant of the article was how to delete/disable accounts, but more *when* to delete/disable accounts, and to explain the effects of doing each.
I've had colleagues delete accounts, only to realise that they had been given the wrong account name, and yes, I've done it also. After that we started to disable them and then after a month, delete.
I know this probably is MCSE "bread and butter" stuff, but not being an MCSE, I didn't know it at the time.
We learn by our (or others') mistakes!
I've had colleagues delete accounts, only to realise that they had been given the wrong account name, and yes, I've done it also. After that we started to disable them and then after a month, delete.
I know this probably is MCSE "bread and butter" stuff, but not being an MCSE, I didn't know it at the time.
We learn by our (or others') mistakes!
As with others who have already replied I disagree and hope that you've simply misunderstood the point of the post.
It wasn't to teach us the simple ABC of domain management but to introduce a new method that possibly some of us where unaware. When was the last time you had five minutes to find a new method of doing a task as "basic" as this!
I'm repeatedly asked to disable someones account, usually five minutes after they've left - usually the last to know - but at least now when I do know I can schedule in the disabling of the account rather than hanging around for the *moment* they leave.
It wasn't to teach us the simple ABC of domain management but to introduce a new method that possibly some of us where unaware. When was the last time you had five minutes to find a new method of doing a task as "basic" as this!
I'm repeatedly asked to disable someones account, usually five minutes after they've left - usually the last to know - but at least now when I do know I can schedule in the disabling of the account rather than hanging around for the *moment* they leave.
User x leaves at 5 PM today. I want automatic disabling of that account starting at 5 pm today.
How do I do this?
The method described in the article is not new. It has been around for quite a while. Looking at may user account would make it clear that it exists without any 'looking up or instruction'.
How do I do this?
The method described in the article is not new. It has been around for quite a while. Looking at may user account would make it clear that it exists without any 'looking up or instruction'.
G-man. We've actually developed a solution for our client. Using vb.net, we check the HR system and LDAP on a regular basis - hourly currently but can be run more often. The process only takes seconds to complete. When we find a user in LDAP that is set to terminated in the HR system, we programmatically disable that account in LDAP thus preventing things get missed in the "exiting employee" process. Obviously, employees have more and more access to critical systems and prompt termination of network access is required (like it or not).
www.praecipioconsulting.com
www.praecipioconsulting.com
Most of all posts here list your name and your "actual" positions in your workforce. This is very basic and everyone of us should know by the moment we acquired the title "Administrator" in our different entities. So that been said, the post is really good and also really basic, therefore, rendering it obsolete.
Thanks all.
Thanks all.
I manage lots of accounts - and I disable and delete lots of accounts ... but I had completely forgotten about setting date and times!! Thanks ...
We leave accounts on the system of people that leave the company for a few weeks. Managers may want to review and move email, replacement staff may need to be setup just like the departed user, etc. Since disabling the account restricts incoming emails, what we have done is set the "Log on to..." value on the "Account" tab for the userid to be some text value like "term". So long as you don't have a workstation named "term" then any logon should be stopped. We also reset the password and remove the AccountOperator group from the userid's Security tab.
I realize there's several ways to accomplish the same thing. Just sharing...
I realize there's several ways to accomplish the same thing. Just sharing...
Microsoft has an article 903158 on disabled accounts in an Exchange 2003 AD environment. It outlines a corrective hotfix to allow disabled accounts to continue receiving email and additional functionallity that is worth a read.
Why would one even entertain the notion that the only folks that traverse these pages are admins with certs.
Bottom line is the article is posted for teaching purposes, and should you already know it then great, let it roll off on to the guy who doesn't.
Bottom line is the article is posted for teaching purposes, and should you already know it then great, let it roll off on to the guy who doesn't.
Thank You for the very level headed reply. Some would just dismiss others who does not know the "Origins of Life (er Net Admin)" as complete bone-heads and unable to learn new stuff.
I have probably forgotten more than they ever knew, Lets work on some really OLD Stuff to see where they are, but from time to time I enjoy getting a refresher. Having been an Instructor it is also good to see someone elses approach.
Just from your attitude & comment - I would probably enjoy working in your oranization, where others I'm not so certain about.
Thanks
I have probably forgotten more than they ever knew, Lets work on some really OLD Stuff to see where they are, but from time to time I enjoy getting a refresher. Having been an Instructor it is also good to see someone elses approach.
Just from your attitude & comment - I would probably enjoy working in your oranization, where others I'm not so certain about.
Thanks
Disable or delete the account. I've seen where the accounts have been left active after some one leaves. I'm talking about 50+ accounts being still active.
Good article. However, there is one error. A disabled user account does continue to receive email. While the disabled user may not be able to access the email (because they can't login), new email does continue to be routed to the account's associated mailbox.
Therefore, when disabling a user account, you may want to either delete the account's associated mailbox (without deleting the user account), or you may want to configure forwarding on the account so that email gets routed to another individual.
Therefore, when disabling a user account, you may want to either delete the account's associated mailbox (without deleting the user account), or you may want to configure forwarding on the account so that email gets routed to another individual.
What about mapped drives? I want to disable an account imediately and not allow them to blow away thier home directory data. How is this accomplished? Disabling the account doesn't cut it.
- Keyboard Shortcuts:
- Prev
- Next
- Toggle
