Disable Inactive Users

Would anyone be able to assist me with creating a mechanism to disable users that have not logged in for 30 days? We are not using an external SSO or User Management system. I am guessing that a business rule would be used to accomplish this? Thanks for your help!