Disable inactive accounts after 90 days

1. How quickly must inactive accounts be removed or disabled?
2. Can Active Directory automatically disable inactive accounts?
3. Why disable inactive accounts?
4. How do I disable inactive computers in Active Directory?

How quickly must inactive accounts be removed or disabled?

The STIG stipulates that all accounts are to be disabled after 30 days of inactivity/no access.

Can Active Directory automatically disable inactive accounts?

Azure Active Directory (Azure AD) does not include the ability to disable inactive accounts automatically, however, automation can be implemented to provide this administrative function.

Why disable inactive accounts?

Stale user accounts in Active Directory are a significant security risk since they could be used by an attacker or a former employee. These inactive accounts also consume reclaimable database space.

How do I disable inactive computers in Active Directory?

Steps: Click AD Mgmt tab - -> Computer Management - -> Enable/Disable Computers. From the drop down menu , select Enable/Disable option based on your need. From the drop down menu, select the domain in which the computers are located.