Disabling an account in Active Directory

BettyN
Lounger
Posts: 36
Joined: 27 Sep 2011, 18:35

Disabling an account in Active Directory

Post by BettyN »

We had to disable an account this week due to an employee termination. After disabling his account in Active Directory (Windows Server 2003,) he was still able to send e-mails through his Outlook. (We are using an Exchange server.)

I performed some testing on my own by logging into a machine as a user, opening Outlook, and opening a file on the network. I then disabled the account. I was still able to access network files and send e-mails. I also tried adjusting the logon hours in AD and got the same results.

Does anyone know how to disable an account so that once it is marked as disabled, the user cannot do do anything on their computer anymore?

Thanks.
Betty

JoeP
SilverLounger
Posts: 2072
Joined: 25 Jan 2010, 02:12

Re: Disabling an account in Active Directory

Post by JoeP »

Use a tool such as PsShutdown to remotely force the computer to re-boot.

Joe
Joe

BettyN
Lounger
Posts: 36
Joined: 27 Sep 2011, 18:35

Re: Disabling an account in Active Directory

Post by BettyN »

Thanks, Joe. I'll check it out.
Betty