Inactive user accounts

[new2008]

Hi ,

How to find inactive user accounts

[Bill Hassell]

No simple answer. A userID is really nothing more than an entry in /etc/passwd. Whether anyone logs in or not depends on the purpose of the userID. For instance, no one logs in as bin or sys, but they are required for normal OS operation. You'll need to filter the special userIDs from your list to check. Then use the last command to see if any logins have taken place. If you have ftp-only userIDs, you'll have to look at the ftpd logfile. Note that there are no idle logs, just active ones. So you'll have to set a criteria for idle and use that for searching.

[new2008]

Thanks