Determine groups that are no longer used in AD

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

What I am looking for is the last time a group in AD was used. We have groups that were created years ago and we want to determine if any of the groups are still used without having to manually check each member user account within the group.

Thanks,
Morgan
 
Morgan,

Given that groups are used to ACL resources, there's not really a surefire
way of knowing if a group is used, because it could be in an ACL for most
any file/folder on the network. Short of crawling the network and reading
ACLs, I don't really know a way to do this.

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com


Morgan said:
What I am looking for is the last time a group in AD was used. We have
Click to expand...
groups that were created years ago and we want to determine if any of the
groups are still used without having to manually check each member user
account within the group.
 
Back
Top