Users able to log into PCs after account deletion

Question

question

ClintBennett-6665 asked · Dec 20, 2019 at 06:09 PM

Users able to log into PCs after account deletion

Management recently rehired some users. Prior to IT reactivating their accounts, they were able to log into Azure AD joined PCs using their previous accounts and passwords. I have confirmed they are deleted in AAD Users. They are NOT able to log into email or other apps, but are able to access PC.

We have disabled cached login via Registry, but the issue seems to persist.

We do use AADDS, but in the Admin center, their accounts show to have been deleted.

azure-active-directory

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2019-12-21T00:19:13.98Z

MarileeTurscak answered · Dec 21, 2019 at 12:19 AM

If they are able to log into the PCs then the accounts may still exist locally, in which case you would still need to delete the users from the local Active Directory.

Also, if the accounts were only recently deleted they might not be entirely gone.

·

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question