How to find out inactive accounts

[byronzhu]

Did anybody out there did any kind of auditing on their ACS users, like to see if the accounts are active or not, or to find out when the user last signon.

Is there a dababase in the ACS that contain this information? Any help will be greatly appreciated...thanks!

[yusuff]

If the account is disabled i.e. inactive, you can check by selecting 'User Setup' then the click on the user eg testuser, and first option listed is "Accoutn Disabled" if the check-box is tecked then this account is not available, you can untick to make it active again.

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/csnt30/user/u.htm#xtocid1403639

There i sno option to see when the user last logged on unless you do AAA accounting on the NAS, then eventually you can keep track of when the user last logged in/out

HTH

R/Yusuf

[byronzhu]

I know that you can find out the disabled accounts, but what I want to do is to find out the inactivive accounts. I would like to generate a report to see when the account was last used, let's say inactive for 60 days +. Is there a database in ACS that contain this info? Does anyone know of any programs/software out there that can do something like this? thanks!