If the account wasn’t there to re-enable, those tasks become harder. I’m not suggesting that you recycle the account by giving it to another user, or allow their manager to use it – I’m talking about all the times you’re asked to create a new account based on a previous employees access, to check a mailbox, to set an out of office message. Just because the user has left doesn’t mean the account no long has a use. What if you need to use the account again? What happens when you delete an account?īy deleting the user account you’re removing the ability for Active Directory to display the account name – instead it will show the SID – which will look something like Why Active Directory would need to display the account name?īecause Active Directory is an integrated environment – the account may have security permissions on a folder, a mailbox, scheduled tasks that run a program as well as audit logs for everything they did with the account. This allows a user account name to change through its use, for example if the users legal name was changed without affecting effecting any existing permissions. When you think of a user account you most likely think of the account name – but the truth is an account is actually a SID (Security IDentifier) – this unique ID is what is used when referencing the user account. I can understand the intent – when you’re done with it, delete it. But there’s a lot more going on than just a users ability to log on. Instead an account is set to “disabled”, removed from any email distribution lists and moved to a “graveyard” container. I was taught to never delete user accounts and every Active Directory environment I’ve managed has been the same.

I’m always surprised to hear of Active Directory user accounts being deleted as part of normal account management.

What happens if i clear my s folder