http://www.webgui.org/community-wiki/expire-unvalidated-email-users is supposed to deactivate users that are unvalidated.

It went thru all the users, and added a new record in the authentication table like"

authMethod = WebGUI,

fieldName =status,

fieldData=    Deactivated

but it did not update the users.status field to 'Deactivated' So all my users are still considered active.