Thank you for the quick reply and yes I agree with you that windows security will be much easier to apply as well as maintain. But just as a second...

Thanks for the reply. So the alter login has to be done manually on that accounts that are not in compliance correct? can that be automated? Is there a script...