Automatically Delete Disabled Active Directory Accounts

Automatically delete Active Directory accounts that have been disabled for a specific time period such as 90 days. You can set how long an account has been disabled before it gets automatically deleted.

Note. It is recommended to enable the AD Recyle Bin before enabling the automation of deleting AD accounts. The AD Recycle bin will let you easily restore delete accounts.

Conditions

The condition section lets you define what accounts to delete.

• Disable time: Set the number of days the account has been disabled.
• Include: Choose to auto delete users, computers or both.
• Path: Select an OU or choose the entire domain. Accounts will only be auto deleted from the selected path.
• Exclusions: Add accounts to exclude from being automatically deleted

Actions

This section you configure what actions to run on the inactive accounts.

• Delete: Check this box to enable auto delete of AD accounts.
• Report only: Report only mode sends an email with the identified accounts, but no actions are run.

Create scheduled task to delete accounts

1. Click on “Scheduler” then click “Add”
2. Select “Delete Accounts” from the dropdown
3. Enter a task name and set the credentials. Click “Next”
4. Set a schedule frequency, daily, weekly or monthly
5. Set the conditions (Path is required)
6. Select one or more actions
7. Choose output options (email or save to csv)
8. Click Save.