Remove old Computer Accounts from AD

R

Rob

How do I find out which Computer accounts are "old" or
invalid, and remove them from AD?
 
M

Mark Renoden [MSFT]

Hi Rob

The following link has a couple of suggestions:

http://www.microsoft.com/resources/...2003/all/deployguide/en-us/dsscc_aut_pwmv.asp

You can choose to delete computer accounts in your organization in one of
the following ways:

Include deleting users' computer accounts as part of the employee departure
procedure. When employees leave your organization, establish a policy by
which their computer accounts are deleted from Active Directory.

Create scripts that search for computer accounts that have not been logged
on to for a period of time or have not had their password changed, and
delete those computer accounts. For example, you might create a script that
identifies accounts that have not been logged on to for six weeks or that
have not had their passwords changed for twice the password lifetime as
prescribed by domain Group Policy, and delete those accounts.

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top