Hi.
I'd like to ask for a recommendation for a scenario where there are two AD domains and in one of the domains all accounts should be managed in disabled state.
Accounts from one domain are managed in a default way so when an identity is terminated, account is disabled and group memberships are removed, which is fine. At the same time there is the other AD domain that is currently managed by another IAM system. We would like to manage accounts in this domain in a disabled state. What would be the best way to achieve this?
Thank you in advance.
Regards.
Mateusz.