Hi, For Auditing purposes, I need to keep track of Disabled date of user/computer accounts in Active Directory. Keeping these details in Excel file is not very reliable. I want to add a custom attribute in AD which stores the disabled date of any user/computer account.
Adding custom attribute to Active Directory is fine and I was able to do this. What I want is, this attribute should be updated automatically when a user/computer account is disabled manually or automatically (using powershell script).
PS: I don't want to use any third party software like AD management pro etc. for this purpose. However, powershell or VB script is acceptable.