How to track inactive users in ADAudit Plus
In this article:
Objective
Prerequisites
Steps to follow
Validation and confirmation
Tips
Related topics and articles
Objective
To identify and track inactive users in ADAudit Plus by generating reports that show accounts that have not logged in for a specific period of time.
Prerequisites
You must have an account with administrative privileges or delegated permissions to access user logon reports in ADAudit Plus.
Ensure that logon auditing is enabled and data collection is properly configured for the relevant domain controllers.
Steps to follow
Log in to the ADAudit Plus web console using an account with sufficient privileges.
Navigate to the Active Directory tab.
Go to User Logon Reports in the left pane.
Click User's Last Logon.
In this report, use the time period filter to select the range you want to evaluate:
Before 7 days
Before 30 days
Before 60 days
Before 90 days
The report will display the list of users who last logged in before the specified date range, effectively showing all inactive user accounts.
Validation and confirmation
Review the generated report and confirm that the list matches expected inactivity criteria.
Cross-check a sample of user accounts in Active Directory Users and Computers to verify that their last logon timestamps correspond with the report data.
Export the report if needed and ensure it includes all relevant columns and filters applied.
Tips
Schedule this report to run automatically and deliver results via email to monitor inactive accounts regularly.
Combine this report with user status or account expiration information to identify accounts that should be disabled or reviewed.
Use longer time ranges, such as Before 90 days, to comply with security policies requiring periodic review of inactive accounts.
Related topics and articles
How to create a custom report in ADAudit Plus