High

Inactive administrator accounts

Identifies admin accounts that have not signed in for 90+ days

Category
Privileged Access
Default severity
High
Rule key
CHECK_STALE_ADMIN_ACCOUNTS
Last updated

How to fix it

Remove or disable administrator accounts that are no longer active.

Further reading

Microsoft documentation →

Run this check on your tenant

EntraAnalyzer evaluates this rule automatically on every scan and emails you the results.

Get started — free first scan →