Microsoft Copilot
Glossary
Inactive and disabled user accounts
Inactive user accounts are accounts that have not signed in for a defined period, such as 90 or 180 days, and disabled accounts are accounts that can no longer sign in, typically after an employee has left.
Also known as: inactive accounts, disabled accounts, dormant accounts, deactivated accounts
Why they matter
A disabled account stops sign-ins but keeps everything attached to it: licenses, group memberships, ownership of Teams and sites, a OneDrive and sometimes devices. An inactive account is still usable, which makes it an attractive target for attackers if its password is weak or MFA is missing.
What to do with them
Inactive internal and guest accounts are reviewed and disabled after a set period. Disabled accounts are cleaned up in a fixed order: transfer ownership, keep or move the files that are still needed, remove licenses and group memberships, and delete the account once the retention period ends.
Where Rencore fits
Rencore policies flag disabled user accounts, inactive internal and external users, licenses assigned to disabled or inactive users, groups with disabled members and devices with disabled user accounts. An automation disables inactive external accounts, and actions disable, enable, restore or delete user accounts.
