WSS v2 will not do this automatically. You can use "wssuserutil" a fabulous
utility written by our very own Keith Ritchie to clean  them up though. It's
much better than doing it by hand, and I would imagine you could have it run
through a scheduled task if you didn't want to do it by hand.

does wssuserutil/spsuserutil actually "remove" the profiles from SPS and
remove the user  from the site/area ACLs? or does it just facilitate
synchronization of display names?

this is major problem in our deployment. Our "SharePoint Phone
Directory" still shows users/profiles of people that have been gone for
many months...

And where can I find this wonderful utility - and is it 3.0
compatible?

I can't speak for SPS, as I don't have it. For WSS you can tell it to sync with
AD, so it will remove accounts from WSS that don't exist in AD anymore, and will
also sync up things like email addresses.

Have you searched for it in your favorite Internet search engine?

I'm not sure if it works with v3 yet or not. Our v3 environment is just a test
environment and this issue isn't something we've gotten to yet.

It was only designed for WSSv2 and SPS2003.

It is not 3.0 compatible, and it would do really bad things if you
recompiled and tried to use it for V3.

There will not be a version for V3.

Instead, my focus is on DeliverPoint for Enterprise Level User
Management.

www.barracudatools.com/Products/DeliverPoint/

After many failed & misleading links I
was able to pull down the 2.0 version.

It is a shame that it will not be 3.0 compatible. Oh well... The
search continues.

I would not call it a shame J Just because I'm not working on a 3.0
compatible version of that tool, doesn't mean I'm not working on a 3.0
compatible SharePoint User Management application .

whats the chances of either wss/spsuserutil or deliverpoint being able
to true-up sharepoint  profiles with ldap queries to ad and automatically
remove old profiles, associated my sites  etc. ?

We have continuing challenge of manually cleaning profiles from
thousands when users  leave the company. The drain on productivity here
with no tools is immense.

Anything on the horizon?

My focus is going to be purely on development work against WSSv3/MOSS
2007 at this time, although there are a few freebie things I'll be
posting to my blog for V2 hopefully over the next couple of weeks. As
far as the Profile cleanup for V2 via wss/spsuserutil... I don't see
that this is going to happen at this time.

The issue is, that I don't own the "Rights" to continue using the
WSSUserUtil/SPSUserUtil names nor the rights to continue development on
anything in the SharePoint Utility Suite (Namely SPSiteManager and
SPUserUtil which were my contributions). I didn't use anything that
wasn't publicly documented fully supported SharePoint API calls, I just
could not legally take them as they are and continue forward with them.

Both were sent to the Microsoft SharePoint Product Group for review to
determine if they would provide official support for them, but that is
not going to happen. Therefore it was left to me to provide continued
email support as time would allow. (Fortunately, the emails I received
on it were always positive, and we didn't find too many things wrong
with them, only tons of email asking for new features JJ)

You best bet on that for DeliverPoint is to probably sign up for the
Beta. I just posted about the Beta today on my blog at
http://blog.krichie.com

Perhaps when I get finished or further along the way on DeliverPoint
2007, I may be able to come back and address some old V2 stuff, but I
can't provide a solid answer on that, at this time.

is the beta backwds compat? for 2003/2007?

No it will not. DeliverPoint 2007 will be solely for WSSv3 and MOSS
2007.

The API changes necessary to manage user  security properly for
SharePoint 2007 as compared to the SharePoint 2003 products is
drastically different.