Go to Google Groups Home    microsoft.public.win2000.active_directory
Re: disabled vs expired

Herb Martin <n...@learnquick.com>

"KurtL" <KL_OExpr...@spamex.com> wrote in message

news:ev1F7buNFHA.3960@TK2MSFTNGP12.phx.gbl...
> What is the difference between disabling an account and expiring an

account?

I don't believe there is any functional difference,
except in where you go to re-activate it.

It is mostly conceptual or if you prefer related to
how you arranged it:  disabling is about taking
a positive immediate action, and expiration is
about setting up a timer to do it automatically at
some time in the future.

It is almost certainly different attributes on the
account properties (internally to the accounts
database) since there is more information to keep
for expiration.

They are both functionally equivalent to lock-out
too -- but of course that is done by the system in
response to a perceived security threat.