Home / server / Questions / 389273
Accepted
user35213
Asked: 2012-05-16 06:56:46 +0800 CST

If account is disabled while logged in can it remain logged in?

  • 772

We have an account that connects in via VPN to pull data from one of our databases. Recently it has not been able to pull the data down.

Looking at it the account is disabled however I feel that this is not the full story. 

Enabled                            : False    
LastLogonDate                      : 09/05/2011 11:06:21
lastLogonTimestamp                 : 129494091812160209
LockedOut                          : False
Modified                           : 30/01/2012 11:22:41
modifyTimeStamp                    : 30/01/2012 11:22:41
whenChanged                        : 30/01/2012 11:22:41
whenCreated                        : 18/07/2008 16:45:39

So the last time it was modified was the 30th Jan 2012 yet its last login is the 9th May. Considering that disabling an account updates the modified date does anyone have any suggestion as to how this could come about? Am a touch concerned that something untoward is going on.

active-directory service-accounts

3 Answers

  1. Best Answer

    Disabling an account wont log a disabled user out, it will just stop them logging in.

    Oh, you didnt notice the last login was May 2011..? (A year ago)

    • 9

  2. Check the year. It has not logged on since it was disabled.

    • 2

  3. The account was modified after it was disabled. This can happen for a variety of reason. Disabled accounts can still be changed.

    And of course, you will not be able to pull down data with a disabled account.

    • 1