Best Practice for Disabling Active Directory Users

Disable the user account in the Active Directory when the user is no longer associated with an organization or process. This makes the user account unusable until the user returns. As a best practice, the user accounts are often disabled for a period before deleting when the user leaves the organization.

Consider a scenario when Active Directory provider or AIM is used in the product for work item assignments, administrative, or system user accounts. The system considers only enabled users for Active Directory search and if the user information is used, the system may fail to access certain features. So before disabling a user in Active Directory, replace the user with an alternate user. To replace user with alternate user, see Replace User topic.