disabling AD account and kicking user off network ??

[Snow-Munki]

Hi,

was wondering, when disabling an AD account how soon does the changes take place ?

I have just ran a test, and my test account is still working even though the account is disabled.

also how can i kick the user off their machines, btw they are miles from here so i can't physically do it

 

[Otacon]

The change is immeidately made to the directory, but it sounds like they were let onto the machine with cached credentials (which you can disable, if you want, but I wouldnt recommend it).

They wont be able to access any network resources, so I wouldnt worry too much. After a couple more logins the cache will expire and without a DC to let them in they'll get denied.

 

[Snow-Munki]

thanks, strange as the test account could still access network shares.

the user is not on the network now anyway, and probably marched out of the building