Hi.

I'd like to ask for a recommendation for a scenario where there are two AD domains and in one of the domains all accounts should be managed in disabled state.

Accounts from one domain are managed in a default way so when an identity is terminated…