Active computer accounts in AD


Dave B

We are performing an inventory of all the active
workstations on our network. Since machines are not
always removed from Active Directory (as they should be)
when the machines are reimaged or decommissioned, "dead"
computer objects/accounts exist in Active Directory.
Is there a way to programmatically determine when a
computer account last communicated with a domain
Any suggestions are appreciated.

Cary Shultz [A.D. MVP]


Take a look at and then go to the free tools and look
for 'oldcmp'. It is a really neat tool that I use alot. Matjaz Ladava also
has a similar tool at ( you will need to click on the
utilities link in the upper left corner of his Site ). If you want to pay
for something ( maybe because you prefer the GUI instead of CLI ) then you
might want to take a look at AD Janitor ( ). I
have played with the evaluation version and it looks nice.

However, you did indicated that you are looking for a way to
programmatically do this. I might suggest that you look at the scripting
examples that are all over the Internet ( start with Tech Net ).



Joe Richards [MVP]

Additionally he could use oldcmp to produce the list (CSV file or suck out the
XML from the DHTML) to find them and then use his own script to remove them or
do what he wants with them.


Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question