You can disable inactive accounts so that they cannot be used to obtain unauthorized access to the manager.
If you try to connect the ESM console to the manager using a disabled account, Symantec ESM displays a disabled account error message.
To disable a manager account
On the enterprise tree, right-click the manager and click Properties.
Click the Access Records tab.
Select the account that you want to disable.
Click Modify.
Click Disabled.