https://community.splunk.com/t5/Splunk-Enterprise/Active-Directory-Credentials-How-do-I-prevent-AD-disabling/m-p/612143#M13831 <P>Hello,</P> <P>My Splunk environment is integrated with Active Directory for Logins per DoD STIG Requirement.&nbsp; However one of the Active Directory STIGs requires AD accounts to be disabled if not logged in the past 30 days.&nbsp; And it does not seem that logging in via Splunk notifies AD that the user has logged in.&nbsp; Please help as I have certain users that only login via the Splunk UI and every month AD is disabling their accounts.</P> <P>Thanks</P> <P>David</P> Mon, 12 Sep 2022 18:31:00 GMT dglass0215 2022-09-12T18:31:00Z https://community.splunk.com/t5/Splunk-Enterprise/Active-Directory-Credentials-How-do-I-prevent-AD-disabling/m-p/612143#M13831 <P>Hello,</P> <P>My Splunk environment is integrated with Active Directory for Logins per DoD STIG Requirement.&nbsp; However one of the Active Directory STIGs requires AD accounts to be disabled if not logged in the past 30 days.&nbsp; And it does not seem that logging in via Splunk notifies AD that the user has logged in.&nbsp; Please help as I have certain users that only login via the Splunk UI and every month AD is disabling their accounts.</P> <P>Thanks</P> <P>David</P> Mon, 12 Sep 2022 18:31:00 GMT https://community.splunk.com/t5/Splunk-Enterprise/Active-Directory-Credentials-How-do-I-prevent-AD-disabling/m-p/612143#M13831 dglass0215 2022-09-12T18:31:00Z https://community.splunk.com/t5/Splunk-Enterprise/Active-Directory-Credentials-How-do-I-prevent-AD-disabling/m-p/612770#M13874 <P>Surprised that I have not received a response.&nbsp; Is this not the right place for this type of question?&nbsp; And if not, can someone point me to where I might get a better reply?</P><P>Thanks</P><P>David</P> Mon, 12 Sep 2022 18:26:48 GMT https://community.splunk.com/t5/Splunk-Enterprise/Active-Directory-Credentials-How-do-I-prevent-AD-disabling/m-p/612770#M13874 dglass0215 2022-09-12T18:26:48Z