NetWrix Inactive Users Tracker

Many corporate security policies require that Active Directory user accounts must be disabled after 31 days of inactivity. This is a good practice; doing so keeps Active Directory secure and clean. For example, someone can create a user account, leave it untouched for many days, and then use it to perform malicious activity against an organization.
Another example is employee retirement: User accounts are usually disabled when an employee quits an organization. Most HR databases only keep information about "primary" user account, but what if a user had additional user accounts?
Inactive Users Tracker is a handy tool that can automatically manage inactive user accounts. The program periodically checks all user accounts in specified domains, reports to you, and automatically disables all accounts inactive for more than a specified number of days.
To detect inactivity, the tool checks the "lastLogon" attribute of every account, which represents the last time a user was authenticated by a specific DC. AD doesnt replicate this attribute; as a result, the lastLogon value will be different on each DC. Inactive Users Tracker handles this correctly: It queries all DCs in the domain and uses the most recent logon time, also called the "true last logon".System requirementsInternet Explorer
Intel or AMD 32 bit, 2GHz
512MB RAM
200MB physical disk space for product installation
.NET Framework 2.0 or later
Active Directory
Limitations in the unregistered versionSeveral features are disabled: notify manager after; set random password after; move to organizational unit; disable account after
filter by organizational unit; process computer accounts; edit e-mail template