Netwrix Inactive Users Tracker

If you're concerned about security, you know that it's important to disable Active Directory user accounts after a certain amount of inactivity. This is especially true when it comes to preventing malicious activity against your organization. That's where Inactive Users Tracker comes in. It's a powerful tool that automates the management of inactive user accounts.

With Inactive Users Tracker, you can easily check all user accounts in specified domains, and receive reports on any accounts that have been inactive for a specified number of days. You're then able to automatically disable those accounts to keep your Active Directory clean and secure.

One of the great things about Inactive Users Tracker is that it doesn't just look at primary user accounts; it checks all user accounts across your organization. This ensures that even if a user has additional accounts, they'll still be managed appropriately.

The tool works by checking the "lastLogon" attribute of every account. This attribute represents the last time a user was authenticated by a specific DC. Since AD doesn't replicate this attribute, the lastLogon value may differ across DCs. But Inactive Users Tracker handles this issue by querying all DCs in the domain and using the most recent logon time, also known as the "true last logon."

Best of all, Inactive Users Tracker is free to use for unlimited use by both organizations and individuals alike. So if you're looking for a reliable way to manage inactive user accounts and keep your Active Directory secure, be sure to check it out.