We have some policies in our company which require to delete AD Account automatically following some condition and after checking existing rules, I'm sure if it's possible in the product :
- Deleting account with a password not set since 6month and last logon since 6month too
- Deleting account if no entitlement anymore
- Deleting account if disabled since 6 month
At this moment, I have only found a rule to disable them if no entitlement presents but it's not our case.