Windows domain account, expired vs. disabled status

Question

I know that expiration feature in a Windows domain environment for user accounts is useful for automation processes. But I'd like to know if a disabled account is the same than an expired account in terms of accesibility to the domain.

In the other words, if I had to avoid the access to the domain resources for a user account, disabling and expiring have the same effect?

Thank you.

score 1 · Accepted Answer · answered May 12 '15 at 14:37

1

They are effectively the same. The only difference is the message displayed to the user when they attempt to logon.

answered May 12 '15 at 14:37

Greg Askew

34,339
3
52
81

score 0 · Answer 2 · answered May 12 '15 at 14:24

0

Yes. They don't differ on the resulting effects, but on the motivations (read: why?) of the deactivation. See here for more details.

answered May 12 '15 at 14:24

shodanshok

44,038
6
98
162

Windows domain account, expired vs. disabled status

2 Answers2