Many corporate security policies require that Active Directory user accounts
must be disabled after 31 days of inactivity. This is a good practice; doing
so keeps Active Directory secure and clean. For example, someone can create a
user account, leave it untouched for many days, and then use it to ...