Obsolete Active Directory Objects

[Guest]

What is the best (and easiest) was to identify and delete obsolete objects
from Active Directory (in particular, Computer Accounts). The Active
Directory in question is a SINGLE forest, SINGLE Domain setup. Thank you in
advance.

 

[Jerold Schulman]

What is the best (and easiest) was to identify and delete obsolete objects
from Active Directory (in particular, Computer Accounts). The Active
Directory in question is a SINGLE forest, SINGLE Domain setup. Thank you in
advance.

Perform the following from a Windows XP member workstation, while logged on as a domain administrator, or from a Windows Server 2003 domain member or DC.

dsquery computer -inactive 13 -limit 0

where 13 is the number of weeks that the computer account has been inactive.

to delete these accounts:

dsquery computer -inactive 13 -limit 0|dsrm -noprompt

See tip 6820 in the 'Tips & Tricks' at http://www.jsiinc.com
See tip 7714
See tip 7992


Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com