remove old computer accounts

[PJ]

I've got over 800 computer accounts in AD but only 500
active computers. I don't know where those other 300
accounts came from. I'm guessing they are left behind
from old surplus systems.

Is there a way to run some kind of scan to find which
computer accounts are inactive? Or is there a clean-up or
removal tool out there? I don't want to have to go
through each computer one by one to determine if it's in
use.

Thanks,
PJ

 

[Richard Moreno]

Hi PJ-

Try this script out. I used it and it's been great.
http://www.rlmueller.net/MoveOldComputers.htm

--
Thanks,
Richard Moreno
MCSE NT4\2000\2003
MCSA 2000\2003

*This posting is provided "AS IS" with no warranties, and confers no
rights.

 

[PJ]

Thank you Richard! I was looking for something just like
this! I will give it a try.

Thanks,
PJ

 

[Joe Richards [MVP]]

Download oldcmp from www.joeware.net, it is on the free win32 tools page.

 

[Active Directory Janitor DevTeam]

Hello PJ

I would really like to advice you to take a look at Active Directory
Janitor (http://www.adjanitor.com) It will do exactly this for you in
a controlled and quick way. It can be downloaded and tested right
away. You could try to do the same with a script but it would not give
you this:

* Easy-to-use user interface, don't take my word for it look here
for some examples: http://www.adjanitor.com/screenshots
* The scanning operation is multithreaded giving a huge performance
advantage over scripting. The progress of the scanning is displayed
visually and can be aborted.
* The computers can be selected by partial names, by domains/OUs or
even imported from text files on the fly. Multiple domains and
subdomains are supported.
* All the computers are pinged in parallell to help decide if the
accounts are active or not.
* Up to 15 different properties are collected from the computers, for
example last logon, create date, OU. This icludes properties that are
not replicated in AD. The computer list can be sorted by anyone of
these.
* Computers can be selected for deletion, disabling OR enabling.
* A robust well tested application.
* Finally, compare the hours of implementing, testing and maintaining
a script solution to make it reliable and robust to the $49.95 that
Active Directory Janitor costs!

Tomas
Active Directory DevTeam

 

[Jeff Cosworth]

Hi there

From reading the answers to your request regarding some tool that can
eliminate those left-over computer accounts I guess you already have solved
this issue. However I used a tool called Active Directory Janitor for this
purpose when I ran in to the same situation in our environment. I managed to
clean out a lot of old computers in the directory. I think you can find it
at download.com or at their site (www.adjanitor.com). It worked very well
for me.

Regards Jeff Cosworth

 

[kripes]

oldcmd worked great, and took about 10 minutes to figure out. Also
it's free. Can't beat it


-
kripe