Set-QADInactiveAccountsPolicy
From PowerGUI Wiki
Set the current user preference on what accounts to consider inactive by default.
This cmdlet is part of the Quest ActiveRoles Server product. Use Get-QARSProductInfo to view information about ActiveRoles Server.
Contents |
Syntax
Set-QADInactiveAccountsPolicy [-AccountExpiredPeriod <int>] [-AccountNotLoggedOnPeriod <int>] [-PasswordNotChangedPeriod <int>] [<CommonParameters>]
Detailed Description
Use this cmdlet to specify the default conditions that must be met for a user or computer account to be considered inactive. The inactivity conditions are specific to the current user, and have an effect on the cmdlets that support the Inactive parameter (such as Get-QADUser or Get-QADComputer). If no account-inactivity related parameters other than Inactive are supplied, then the Inactive parameter retrieves the accounts that meet the conditions defined by this cmdlet. To view the inactivity conditions that are currently in effect, use the Get-QADInactiveAccountsPolicy cmdlet.
Parameters
| Name | Description | Required? | Pipeline Input | Default Value |
|---|---|---|---|---|
| AccountExpiredPeriod | Use this parameter to specify the number of days after which an expired account is considered inactive by default. Thus, an account is considered inactive if the account remains in the expired state for more days than specified by this parameter. | false | false | |
| AccountNotLoggedOnPeriod | Use this parameter to specify the period, in days, that an account is not used to log on, after which the account is considered inactive by default. Thus, an account is considered inactive if no successful logons to that account occur for more days than specified by this parameter. | false | false | |
| PasswordNotChangedPeriod | Use this parameter to specify the password age, in days, after which an account is considered inactive by default. Thus, an account is considered inactive if the password of the account remains unchanged for more days than specified by this parameter. | false | false |
Examples
EXAMPLE 1
Set-QADInactiveAccountsPolicy -AccountExpiredPeriod 0 -AccountNotLoggedOnPeriod 30 -PasswordNotChangedPeriod 120
Description
Set the default inactivity conditions so that an account is considered inactive if any of the following is true:
- The account is expired - The account was not used to log on for at least 30 days - The password of the account remains unchanged for at least 120 days
