nFront Account Disabler can automatically disable accounts that have not been used in a specified period of time. It can be configured to exclude specific groups.