disable inactive computer accounts in AD

  • Thread starter Thread starter John Strow
  • Start date Start date
J

John Strow

Does anyone have simle tool (cript) to discover and disable or delete
inactive computer accounts in AD
Thanks,
John
 
DSQuery and DSRM utilities should help.

DSQUERY computer domainroot stalepwd 90 -d domain.com > staleCompAccts.txt
TYPE staleCompAccts.txt | DSRM -d domain.com -noprompt

Thanks,
Christopher Ransom, MCSE 2000/2003, MCSA 2000/2003, CCNA
Microsoft Enterprise Platforms Support
Windows NT/Windows 2000 Directory Services
 
Actually i need these computers accounts to be discovered, disabled and
moved to disabled_accounts OU

Will DSquery, DSmod and DSmove work in Windows 2000 AD

Thanks,

John
 
Does anyone use this tool in enterprise environment. Is it recommended by
Microsoft. Any testimonials?

Thanks,

John
 
I can second this. I have used in many many many production environment.
Read any of the posts that Joe makes. Like Paul said, if Joe recommends it
then that is all I need. If Joe wrote the application then you can bet that
I am going to use it. He has a lot of really good applications on his web
site. You might want to take a spin over there. ADFIND is another pretty
neat application.

--
Cary W. Shultz
Roanoke, VA 24014
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com
 
Thanks Cary and Paul.

I can say that I have many Fortune 500 companies using the tool. At least one
Fortune 5 company using it on a regular basis. Several State governments and
some militaries as well. I believe the US government is using it in a few
departments but I am not positive as the guy wasn't clear if he was just using
it for reporting or reporting and cleaning up. A couple of energy companies and
a multiple manufacturing companies.

In the end it is up to the person who is responsible as to whether or not the
tool will be used. I recommend testing it in a lab and definitely doing the
report function and not using -forreal for a bit in production prior to
unleashing it to disable and delete things so that you have a good feel for it.

joe
 
Back
Top