Exclude Long-Term Disabled Computer Accounts from Risk Threshold Calculation

Products Auditor Ideas
,
1

What is a one sentence summary of your feature request?

Allow disabled computer accounts older than 90 days to appear in Risk Assessment reports without affecting the overall risk threshold

Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.

Currently, disabled computer accounts are included in Risk Assessment calculations regardless of how long they have been disabled. In many environments, computer accounts may remain disabled for operational, compliance, or historical reasons and do not necessarily represent an active security risk.

It would be beneficial to introduce a configurable condition that allows disabled computer accounts older than 90 days to continue appearing in the report for visibility purposes, while excluding them from risk threshold calculations and risk scoring. This would provide a more accurate representation of actual security risks while still allowing administrators to monitor stale disabled accounts.

How do you currently solve the challenges you have by not having this feature?

Currently, there is no effective way to exclude these accounts from risk calculations while still keeping them visible in the report. As a result, risk scores may be inflated and require manual review.

2

Hello Ali,
This is a nuanced and well-thought-out request. The separation between report visibility and risk scoring impact is an important distinction that our current model does not support. Inflated risk scores due to long-term disabled accounts are a common complaint, and your proposed solution (configurable threshold + exclude from scoring but keep visible) is the right design pattern. It preserves audit trail value while preventing stale accounts from distorting the overall risk posture picture. This aligns with the broader theme across your recent submissions: more granular configurability in Risk Assessment. We are grouping all of these related requests for the Risk Assessment team to review holistically, as they may be best addressed together in a future enhancement cycle. Thank you for your thorough, we are looking forward to more contributions from you!