Enterprise Security further tightens access control policies by implementing methods that allow system administrators to restrict user access by setting a fixed expiration date, or by denying access to users who have not logged in within a specific time period. By default, neither the expiration by date or inactivity restriction is enabled. Table 15-10 lists the properties that configure user account expiration.