I am wondering (as an added security layer or option) if in W2K3 Active Directory there is a way to automatically disable an account if it has not been accessed for a certain period of time? I know you can expire an account on a specified date but what about if a user is out and you want a way to automatically disable their account if they are not back in a certain number of days rather than having to do it manually.