Windows Server 2016 brings new features to Active Directory Domain Services. One of the features is "Group Membership Expiration". Group Membership Expiration allows you to add users to a security group for a certain period of time. For example, you can add a user to Domain Admins security group for a limited time.
To use Group Membership Expiration feature, you must raise functional level to Windows Server 2016.
About Nirmal Sharma
Nirmal Sharma is a MCSEx3, MCITP and Microsoft MVP in Directory Services. He specializes in directory services, Microsoft Azure, Failover clusters, Hyper-V, and System Center products and has been involved with Microsoft Technologies since 1994. In his spare time, he likes to help others and share some of his knowledge by writing tips and articles on various sites and contributing to Health Packs for ADHealthProf.ITDynamicPacks.Net solutions. Nirmal can be reached at [email protected]