Hi ,
So when you say the user has not login for > 90 days.. which system do
you mean? AD or eDir?
For AD, there are two attr where the last login time is stored. One of
the attrs is only updated in the DC and not replicated to other DCs.
the other one is replicated to other DCs every 14 days.
For eDir there is only one attr and you can query that using policy.