Disabling an AWS Managed Microsoft AD user

Use the following procedure to disable an AWS Managed Microsoft AD user with AWS Directory Service Data in the AWS Management Console, AWS CLI, or AWS Tools for PowerShell.

Important

When you disable a user's account, the user loses any permissions to access their account and applications.

Before you begin, complete the following:

Creating your AWS Managed Microsoft AD.
Enable user and group management for Directory Service Data. You can only enable this feature from the Primary AWS Region for your directory. For more information, see Primary vs additional Regions.
You'll need the necessary IAM permissions to use AWS Directory Service Data. To get started, you can use the AWS managed policy: AWSDirectoryServiceDataFullAccess or AWS managed policy: AWSDirectoryServiceDataReadOnlyAccess. For more information, see Directory Service API permissions: Actions, resources, and conditions reference and Security best practices in IAM.
Creating an AWS Managed Microsoft AD user.

AWS Management Console

You can disable an AWS Managed Microsoft AD user account in the AWS Management Console.

To disable an AWS Managed Microsoft AD user account with the AWS Management Console

Open the Directory Service console at https://console.aws.amazon.com/directoryservicev2/.
From the navigation pane, choose Active Directory, and then choose Directories. You're directed to the Directories screen where you can view a list of directories in your AWS Region.
Choose a directory. You're directed to the Directory details screen.
Choose Users. The tab shows a list of users in your directory.
Choose the user whose account you want to disable. You're directed to the User details screen.
Choose Actions. Then choose Disable user account and Disable user account again.

Note

To re-enable your user's account, you must reset the user's password. For more information, see Resetting and enabling an AWS Managed Microsoft AD user's password.

AWS CLI

The following describes how to format a request that disables an AWS Managed Microsoft AD user account with the AWS Directory Service Data CLI.

To disable an AWS Managed Microsoft AD user account with the AWS CLI

Open the AWS CLI, and run the following command with your Directory ID and username:


aws ds-data disable-user --directory-id d-1234567890 --sam-account-name "jane.doe"

For more information, see disable-user.

Note

To re-enable your user account, you must reset the user's password. For more information, see Resetting and enabling an AWS Managed Microsoft AD user's password.

PowerShell

The following describes how to format a request that disables an AWS Managed Microsoft AD user account with AWS Tools for PowerShell.

To disable an AWS Managed Microsoft AD user account with AWS Tools for PowerShell

Open PowerShell, and run the following command with your Directory ID and username:


Disable-DSDUser -DirectoryId d-1234567890 -SAMAccountName "jane.doe"

For more information, see Disable-DSDUser.

Note

To re-enable your user account, you must reset the user's password. For more information, see Resetting and enabling an AWS Managed Microsoft AD user's password.

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

Deleting a user

Resetting and enabling a user's password