I know this is an odd question from the start, let me explain.
I am in a very large organization with a centralized helpdesk that supports several other sister organizations. Users are comming and going at an extremely fast rate. We have no way to force users to checkout. Some users simply leave on organization and go to another. Eventually, some accounts do end up in an OU named "Disabled" and we try to keep only disabled accounts in that OU. The problem is that sometimes the user shows back up at one of the organizations, calls the HD, and gets his account re-enabled. When this happens, most of the time the HD leaves the account in the Disabled OU, then when we do a clean-up that account gets deleted...
I am trying to keep this from happening, and the solution I am comming up with so far is to apply a GPO to the Disabled OU that runs a script. I want the script to do 2 things;
1. Display a warning to the user that their account is in the wrong OU and to contact a local administrator to get it moved
2. 10 seconds after the warning is displayed, force a logoff.
Can someone give me a hand with how that script would look?