Security best practices (and indeed the NIST 800-53 security controls) require users who have not used a system in a defined period of time to be deactivated (blocked, in Drupal parlance.)
This module allows the administrator to specify the number of days before a user is deactivated, and when they're unblocked how long that unblock lasts before they are re-deactivated.
Post-Installation
After installing, go to Configuration > Users > Deactivate users and configure as needed. The time to actual blocking of a user is "Inactivity Limit" + "Grace Period". Some sites set it as 85 and 5 to achieve their required 90 days blocking. Be sure to personalize the email templates for your site.
Like this? Check out some of John's other modules:
Supporting organizations:
Development support
Project information
- Project categories: Access control, Security
85 sites report using this module- Created by john franklin on , updated
Stable releases for this project are covered by the security advisory policy.
Look for the shield icon below.
