Global setting to deactivate users after a period of inactivity in the system

As an Enterprise - security reviews are a must. In order to be able to take advantage of the full products capabilities while passing an audit, it would be helpful if there were a global setting that could be applied which deactivated a user after a period of days of inactivity. The system already captures last login date, therefore this could be the reference point. If a user tries to log back into the system they should be presented with a msg that indicates their access was deactivated for non use. If the access is needed they should contact their administrator.