Determining the last time a User group was used

[Guest]

We want to remove User Groups that are no longer used but we are not sure which ones those are. Is there a way to determine the last time a user group was used? We can then delete the user groups that were not accessed for a certain period of time.

Your attention to this posting is appreciated.

Thanks,
Morgan

 

[Jeremy]

Morgan,
I am assuming here that by the phrase "used" you are attempting to determine
the last time that a security group was used in order to perform an access
check. If so, auditing is your best and only friend right now. In order to
perform such an audit and collect the data for it you will need to look at
MACS Microsoft Auditing Collection System. This is currently in a Beta
development phase.

If you are refering to a distribution lists and when it was last used for
email, that would be in the message tracking logs on the exchange servers.

If you are looking for membership changes or any change to the group in
general, you can use repadmin dc.domain.com /showobjmeta.

There doesn't seem to be any majic bulllet in any given system today that
can provide that data outside of auditing/logging though.

Jeremy

We want to remove User Groups that are no longer used but we are not sure

which ones those are. Is there a way to determine the last time a user
group was used? We can then delete the user groups that were not accessed
for a certain period of time.

 

[Guest]

What I am looking for is the last time a group in AD was used. We have groups that were created years ago and we want to determine if any of the groups are still used without having to manually check each member user account within the group.

Thanks,
Morgan