Help with Active Directory

[pzs22]

Hey, quick question about Active Directory. Is there any way to easily identify users no longer logging into a domain? It seems we have a lot of accounts that should be disabled, but aren't, and we would like to get rid of/disable all of the user accounts no longer accessing our domain. We have a few ideas, but would like to know if there is an easy way.

Thanks.

[Force Flow]

Try looking at the last time the account was accessed. If it has been over a year (or whatever your policy of inactivity is), then disable it.

[pzs22]

How can you tell the last time it was accessed?