Steve Puddick

This plugin prevents unauthorized admin users from damaging or compromising your website.
A common technique for hackers is to exploit vulnerabilities in your plugins or theme and try to create an unauthorized admin user for themselves. Once they have admin access they can do whatever they want to your website. They can deface it, display inappropriate content, or carry out many other malicious acts.
Restricted User Activity adds an extra step to the process of allowing Admin users to perform actions on your website. It achieves this by explicitly specifying valid Admin user ids in the wp-config.php file. Even if a hacker was able to create an Admin user for themselves, they won’t be able to perform any actions since their user id would not be in the valid user list.
Note: This plugin requires some technical knowledge about how the WordPress wp-config.php file works and basic PHP coding. A single line of code needs to be added to the wp-config.php file.

Restricted User Activity

Provides stricter controls for admin user creation and activity

NateJacobs

Expires a user’s access to a site after a specified number of days. It uses the user registered date/time and an admin configured number of days to determine when to expire the users access. The administrator can restore a user’s access from the user’s profile page.
There is a filter available for developers to hook into and alter the expiration date of a specific user on the fly during authentication. The filter uae_expiration_date passes the current expiration date and the WP_User object.

User Access Expiration

A user's access to a site is disabled after a specified number of days. The admin can set the number of days since registration to deny access.

Restricted User Activity vs User Access Expiration