Active Directory account - automatic disable

[bbigford]

An engineer from a long time ago set up a service account to expire at 6pm during the day it was enabled. The purpose behind this is to enable a service account for a phone vendor to use temporarily.

Normally, I would find an account expiration script set in Task Scheduler on the DC, using Group Policy, or an account expiration set in the user's properties. I've looked on both DCs and am coming up empty.

Where else would one set an automatic account expiration, that you're aware of?

[popester]

Hopefully i am reading this correctly. Have you tried account expires in Active Directory Users and Computers?

[bbigford]

@popester said in Active Directory account - automatic disable:

Hopefully i am reading this correctly. Have you tried account expires in Active Directory Users and Computers?

Yes. Account is not set to expire in the Account tab. I also checked for a logon script of any kind, under the Profile tab. Nothing in Task Scheduler, or Group Policy.

[dbeato]

I remember this only:
https://blogs.technet.microsoft.com/makeiteasy/2012/11/23/auto-mail-expiring-domain-accounts/

http://mikefrobbins.com/2013/12/12/setting-an-active-directory-user-account-to-expire-at-a-specific-time-of-day-with-powershell/

[bbigford]

@dbeato said in Active Directory account - automatic disable:

I remember this only:
https://blogs.technet.microsoft.com/makeiteasy/2012/11/23/auto-mail-expiring-domain-accounts/

http://mikefrobbins.com/2013/12/12/setting-an-active-directory-user-account-to-expire-at-a-specific-time-of-day-with-powershell/

Bummer, I had looked in both of those places.