Disabling application/network accounts

[s0h0us () yahoo com]

Can anyone share their thoughts on disabling accounts for employees who are out on extended vacations or medical 
leaves? what is considered "best security practice", specifically in the financial industry? We have a policy that 
requires accounts to be disabled for employees who will be away from the company for 10 or more consecutive days.
thanks in advance for your comments.