Is it not possible to get it from the disabled event that isc logs? What i thought was to get the date of the disable event of the AD account and compare it with the lifecycledate. But i dont know how to get the disable event and the date of it.
Is it not possible to get it from the disabled event that isc logs? What i thought was to get the date of the disable event of the AD account and compare it with the lifecycledate. But i dont know how to get the disable event and the date of it.