| |
microsoft.public.win2000.active_directory |
news:ev1F7buNFHA.3960@TK2MSFTNGP12.phx.gbl... I don't believe there is any functional difference, It is mostly conceptual or if you prefer related to It is almost certainly different attributes on the They are both functionally equivalent to lock-out
except in where you go to re-activate it.
how you arranged it: disabling is about taking
a positive immediate action, and expiration is
about setting up a timer to do it automatically at
some time in the future.
account properties (internally to the accounts
database) since there is more information to keep
for expiration.
too -- but of course that is done by the system in
response to a perceived security threat.