Most organizations have procedures in place for removing user accounts that are no longer required. If these procedures are not followed in every instance, then some accounts may remain active for months or years after the account owner has left the organization. Unused accounts are undesirable because they:
- Provide a means of unauthorized access
- Are prime targets for brute-force attacks
- Can increase license costs
UAF displays a list of unused accounts based on the parameters supplied by the administrator. The administrator can then disable or delete the unused accounts manually, or let UAF do it automatically. UAF can also delete a user's Microsoft Exchange mailbox and home folder if desired.
Features
- Fast Ferret algorithm
The Fast Ferret algorithm improves scan performance by reducing the number of queries sent to the domain controllers.
- Account resource cleanup
UAF can automatically delete a user's Microsoft Exchange mailbox when their account is deleted. The user's home folder can also be moved or deleted at the same time.
- Ignore list
Administrators can exclude accounts or groups from the scan by adding them to the ignore list.
- Computer account scanning
UAF can identify and remove unused computer accounts (also known as workstation accounts). Computer accounts exist for every Windows NT, 2000 and XP computer in a domain.
- Delayed scanning
UAF can start a domain scan after a specified number of hours. This allows network administrators to run scans outside business hours.

Related keywords: