My client wants a rule which will disable users after 90 days of object
disuse. The rule is monitoring Login Time, and running fine off of a job

The problem is what about users who never log in? If I make the rule
trigger on if login time is more than 90 days ago or login time not
available then newly created users will be indistinguishable from users
who have never logged in for 90 days.

To work around this, on an add event we put the current time into Login
Time. But a better solution would be if we could check object creation
time if login time is not available. I am pretty sure that's stored in
the DIB somewhere but I don't think it's exposed as an attribute.

Is there any easy way to retrieve the object creation timestamp?


rrawson's Profile:
View this thread: