Still weeding out computers in AD

S

spr

Ok, with the help I recieved from before, I've started disabling computer
objects identified with the dsquery -stalepwd switch. If I dont get any
complaints from users who cant use there systems for a week, I then go in
and delete the disabled objects. Well, I was testing today and may have
found a snag in my plan. I disabled a computer of mine, rebooted it, and
logged on. I was sucessful, I was then able to authenticate to the other
resorces on the network. I know this is because of cached credentials(set at
2 users on my machines), but how long will they last on a machine? My fear
is, I disable a notebook, it comes back on my network, the user sees no
difference because he's using a cached login, a week later I completly
delete the computer from my OU and my scans and numbers are off.

any ideas?
 
S

spr

I've decided to throw in the -inactive switch in also as a requirement for
the disable mod.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top