Inactive Users Tracker - Automates the management of inactive user accounts. Inactive Users Tracker automates the management of inactive user accounts. The software periodically checks all user accounts in specified domains and reports all accounts inactive for more than specified number of days.

Many corporate security policies and compliance regulations require that Active Directory user accounts must be disabled after certain period of inactivity. This is a good practice; doing so keeps Active Directory secure and clean. For example, someone can create a user account, leave it untouched for many days, and then use it to perform malicious activity against an organization. Another example is employee retirement: User accounts must be disabled when an employee quits an organization, but in practice, IT departments are usually the last to know when somebody leaves. Also, most HR databases only keep information about the "primary" user account and know nothing about additional user accounts.

NetWrix Inactive Users Tracker Features:
1. Checks all users and reports those that have been inactive for a specified number of days.
2. Automatically deactivates inactive user accounts, either by disabling or setting a random password, moving to another OU, or finally deleting such accounts (*).
3. Sends notifications to managers about their inactive direct reports (*).
4. Reports can be sent to IT auditors to ensure regulatory compliance (SOX, HIPAA, SAS-70, etc).

To detect inactivity, the tool checks the "lastLogon" and "lastLogonTimestamp" attributes of every user account, which represent the last time a user was authenticated by a specific DC. AD doesn't replicate these attributes; as a result, the values will be different on each DC. The Inactive Users Tracker handles this correctly: It queries all DCs in the domain and uses the most recent logon time, sometimes called the "true last logon".

Inactive Users Tracker comes in two variants: free and commercial. The commercial version is available
with the following features: notifications to managers, report customization, automatic account
deactivation, moving accounts to a specified OU or account deletion, accounts filtering and full technical
support.

Commercial Version Include:
1. Notify manager
2. Set random password
3. Disable account
4. Move to a specific organizational unit
5. Delete account
6. Process computer accounts
7. Filtering abilities: By account name, By Active Directory organizational unit

The free version can be used by businesses and individuals for an unlimited time, at no charge. The
commercial version can be evaluated free of charge for 20 days.

Support following operating systems:
1. Windows XP Service Pack 2 (32-bit or 64-bit)
2. Windows Server 2003 (32-bit or 64-bit)
3. Windows Vista (32-bit or 64-bit)
4. Windows Server 2008 (32-bit or 64-bit)

To install Inactive Users Tracker, run the setup software on any computer in the managed domain (not
necessarily a domain controller). On the last step of the installation wizard, the configuration dialog box
opens.

The license of this software is Freeware, you can free download and free use this server utility software.