If someone is gone from the organization for an extended period, disable (deactivate) that user’s profile.
You can use the Analyze Profile Activity (ANZPRFACT) command to regularly disable user profiles that have been inactive for a specified number of days. When you use the ANZPRFACT command, you specify the number of inactive days that the system looks for. The system looks at the last used date, the restore date, and the creation date for the user profile.
Once you have specified a value for the ANZPRFACT command, the system schedules a job to run weekly at 1 a.m. (starting with the day after you first specified a value). The job examines all profiles and disables inactive profiles. You do not need to use the ANZPRFACT command again unless you want to change the number of inactive days.
You can use the Change Active Profile List (CHGACTPRFL) command to make some profiles exempt from ANZPRFACT processing. The CHGACTPRFL command creates a list of user profiles that the ANZPRFACT command will not disable, no matter how long those profiles have been inactive.
When the system runs the ANZPRFACT command, it writes a CP entry in the audit journal for each user profile that is disabled. You can use the DSPAUDJRNE command to list the user profiles that are newly disabled.
Another method for checking to ensure that user profiles are being disabled on your planned schedule is to use the Print User Profile (PRTUSRPRF) command. When you specify *PWDINFO for the report type, the report includes the status of each selected user profile.