AD Users Inactive | Suspend Accounts (Legacy)
IMPORTANT: The legacy Cayosoft Suspend™ configuration will be retired on June 1st, 2026. The legacy configuration will be removed in the product release following the retirement and will be no longer supported. The legacy Suspend rules will remain functional in older versions of Cayosoft Administrator with no support provided by Cayosoft. Migrate to the modern Suspend configuration before the retirement—refer to the following article for additional information on migration: Modern Suspend Configuration.
Overview
Inactive Active Directory Users are users who have not logged on in more than the specified number of days - OR - who have not changed their passwords in more than the specified number of days. Inactive User accounts are often unnecessary and can be safely deprovisioned with Cayosoft Suspend™. Because last logon date details from Active Directory may be inaccurate, the length of time since the account's password was changed is also considered. To avoid identifying newly created accounts, account age is also considered.
NOTE: Requires Cayosoft® Suspend™ tool to be installed on the machine running the Cayosoft Administrator Service.
When to use this rule
Use this rule to suspend inactive Active Directory user accounts.
The user account should meet all these conditions to be suspended:
Minimum days past since the last logon.
Minimum days past since the password was set.
Minimum days past since account creation.
NOTE: The Minimum days past since password last set should be set to 0, so users would not be filtered by password last set date (filter by this setting will not exclude any users).
Rule Settings
| Setting name | Description |
|---|---|
| Query Section | |
| Limit scope to this domain or OU |
This setting defines the search query scope. To improve query performance, limit the scope to a specific OU. IMPORTANT: To test the rule configuration, limit the rule scope to an OU that contains test accounts or objects and use the Preview feature. |
| Query criteria |
Query criteria are sent with the query and may improve query performance. TIP: For additional information on the criteria builder, see the How to use Query Builder dialog for Query Criteria and Filter rule settings. |
| Minimum days past since the last logon | Set a minimum number of days past since a user signs in to Active Directory. |
| Minimum days past since the password was set | Set a minimum number of days past since an Active Directory user password was set. Use 0 to disable this check. |
| Minimum days past since account creation | Set a minimum number of days past since the Active Directory user account creation. |
| More options | |
| Properties to display |
Each object property defined in this setting matches the column that will be displayed in the Web Portal for this web query. To display additional columns, add the required properties to the Properties to display list. To add extension attribute 1 that is synchronized from AD, you need to use a value like:
Copy
|
| Filter |
Set the filtering conditions to hide unwanted data based on criteria not supported in the Query criteria setting. Example: filter by the found object Distinguished Name. TIP: For optimal performance, use the Query criteria setting above to filter objects whenever possible. |
| Sort by | Sort result object list. |
| Action Section | |
| Default Suspend Settings |
It is possible to use the default user suspend settings file or custom suspend settings file. To select the custom suspend settings file, click the [...] button. Default User Suspend Settings File is the file provided in Home > Configuration > Connected Systems Extensions > Active Directory configuration, Cayosoft Suspend Policies section. |
| Suspend related Office 365 user | Set to Yes to suspend a matching Office 365 user account. Configure the Office 365 user account suspend settings in the Suspend | Office 365 User and Guest rule. |
Output Section
This section defines the output format of this rule.
To get more information about this section, please see the Rule Output section article.
Enforce/Schedule section
This section defines the schedule for how often to run the rule.
To get more information about this section, please see the Rule Enforce/Schedule section article.
Change history
| Version | Notes |
|---|---|
| 12.5.0 | The Suspend related Skype on-premises user setting has been deprecated. |
Comments
0 comments
Please sign in to leave a comment.