Using account expiration
User objects can be set to automatically expire.
Getting ready
To set account expiration for a user object, sign in to a domain controller or a member server and/or device with RSAT for Active Directory Domain Services installed.
Sign in with an account that is a member of the Domain Admins group or the Account Operators group or with an account that is delegated to modify user objects in the domain or scope of the OU where the user object resides.
How to do it...
There are four ways to do this:
- Using Active Directory Users and Computers
- Using the Active Directory Administrative Center
- Using command-line tools
- Using Windows PowerShell
The two graphical tools are useful for configuring account expiration on individual accounts, although the Active Directory Administrative Center can be used to retrieve the Windows PowerShell cmdlets through the Windows PowerShell History feature.
The command-line tool is particularly...
