| CPC H04L 63/108 (2013.01) [G06F 21/50 (2013.01); G06Q 40/02 (2013.01); H04L 63/102 (2013.01); H04L 63/1408 (2013.01); H04L 63/1441 (2013.01)] | 20 Claims |

|
1. A method comprising:
aggregating, automatically by service account monitoring engine, event activities of a plurality of service accounts on an enterprise network, wherein each service account comprises a machine user account in a user management system that enables autonomous operation of an autonomous job within the enterprise network and wherein operation of the autonomous job fails without a valid service account;
determining, based on aggregated information associated with the event activities of the plurality of service accounts, an identity of a plurality of potentially dormant service accounts;
verifying, automatically in response to generation of a listing of the plurality of potentially dormant service accounts, whether each potentially dormant service account is dormant or active;
disabling, automatically based on a received confirmation input confirming dormancy of a first potentially dormant service account, monitoring of the first potentially dormant service account;
disabling the first potentially dormant service account;
re-enabling, based on failure of an autonomous job whose operation is reliant upon the first potentially dormant service account, the first potentially dormant service account; and
decommissioning, at a directory service server and automatically based on expiration of a disablement time threshold, the first potentially dormant service account.
|