Computer accounts unused for more than 120 days

  • Thread starter Thread starter Marlon Brown
  • Start date Start date
M

Marlon Brown

On Win2K AD SP4, how can I find out computer accounts which have not been in
use for longer than 120 days. From there I'd delete them.
I have eight DC's.
 
Marlon said:
On Win2K AD SP4, how can I find out computer accounts which have not been in
use for longer than 120 days. From there I'd delete them.
I have eight DC's.
Click to expand...

There might be some way that I'm not aware of but I can't imagine why
you would need this. Does your company have a procedure for departing
employees?

Where I work, the HR department notifies IT when an employee leaves so
that we can disable their account. You would be surprised the number of
times I have had employees delete what they considered to be unimportant
data just before they left, because nobody notified me that they were
leaving. Had I known, I could have had the account disabled and
prevented it. 120 days is a long time to keep an account open if the
employee is no longer working for the company. It makes it harder to
recover any lost data in the event that the user did as I mentioned
above. It also permits the user to continue accessing company
information although they are no longer technically supposed to be
authorized.

Sean
 
It is 120 days (or something like that) because we are an education inst. =
vacation 120 days during Summer.

I do ask people to keep me informed on who is leaving, machine renamings,
etc but unfortunately that's not an accurate way and I have lots of machine
accounts old that needs a clean up.
I am wondering which attribute would be able to give me that info...
 
Hi Marlon,

DSQUERY

The command used for this is dsquery computer -stalepwd 90 -d aceina -uco
-limit 0 > c:\stale90.txt which pipes to text file which can then be opened
in Excel. The results can be piped to another command line tool called
dsrm.exe to remove the accounts for example: type c:\stale90.txt | dsrm -d
aceina -noprompt

Thanks,

(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top