AD JIT accounts now show as Disabled correctly after being disabled

Disabling an Active Directory JIT account completed correctly at the source, but on tenants where the operation took longer to finish, the dashboard could still show the account as — and even after a manual Sync Now, the column kept showing a time instead of clearing to .

The agent now confirms the disable as soon as the account has been disabled. The dashboard reflects promptly and the Expiry Time clears as expected.

If cleanup such as security group removal doesn't complete after the account is disabled, that's now recorded as an event in the dashboard, so it no longer passes unnoticed.

Available with agent version and later — install the updated agent on your domain controllers to pick it up.