How to determine last logon time for a computer account in a domain

[Yuri Palagin]

Hello all,

Win2k domain with Active Directory on two w2k+sp4 controllers; about 200
computers w9x/NT4/w2k/XP/2003 logging on to the domain.
What I need is to purge no longer used computer accounts from AD. How can I
determine last logon time for both pre-w2k and post-w2k computer accounts to
decide which are to be deleted? Maybe there is a sample vbscript someplace?
Is that applicable to pre-w2k accounts at all?

Thank you,

ypal

 

[Cary Shultz [A.D. MVP]]

Yuri,

Take a look at http://www.joeware.net and look in the free C++ section for
oldcmp. This is a really awesome tool that I use whenever I want to make
sure that the computer accounts in any of the environments that I manage are
"clean and up-to-date". It is really easy and Joe has built in some added
security ( for example, you have to first disable the computer account
objects before you can delete them and you need to add two extra switches -
essentially making this absolutely sure that you are doing what you really
intend to be doing ).

There are also some utilities - such as ADJanitor - that you can purchase.
I have looked at the evaluation version of ADJanitor and it looks nice. You
have to make the choice if you want a free command line utility ( and I - as
well as many others - can vouch for its accuracy and efficiency ) or a
paid-for GUI utility. I believe that ADJanitor costs around $50.00 but I
believe that it does both computer accounts as well as user account.

Have fun with this.

Cary


BTW - I like the dhtml reports. This will make sense when you use this
wonderful tool.

 

[Torgeir Bakken \(MVP\)]

Hello all,

Win2k domain with Active Directory on two w2k+sp4 controllers; about 200
computers w9x/NT4/w2k/XP/2003 logging on to the domain.
What I need is to purge no longer used computer accounts from AD. How can I
determine last logon time for both pre-w2k and post-w2k computer accounts to
decide which are to be deleted? Maybe there is a sample vbscript someplace?
Is that applicable to pre-w2k accounts at all?

Hi

You could e.g. take a look at this Richard Mueller post:

http://groups.google.com/[email protected]

 

[Michal Ch]

find in google
NetPWAge.exe

 

[Joe Richards [MVP]]

Hey thanks Cary. )

joe

 

[Cary Shultz [A.D. MVP]]

Thank you, Joe. I really love this tool.

Cary

Hey thanks Cary. )

joe