We have an OU with terminated users. The accounts are disabled and have had all groups removed except for Domain Users. We had a thought of creating a group with no permissions and making this group the default group for these users. Is there any known best practices for situations such as this? We need to keep these accounts around and cannot delete them.
Thanks!