Windows 2000 Inactive Domain Accounts

  • Thread starter Thread starter Jody Flett
  • Start date Start date
J

Jody Flett

Hi Everyone

I am looking at producing a process to detect and remove inactive user
accounts.....

Have been looking at a number of options with lastlogon, whencreated,
password last set attributes etc. seen a few 3rd party utils....

Lastlogon would be good but it is not a replicated attribute which means I
need to query every single DC..... which is possible but quite intensive in
a large environment... and then the data has to be put together... probably
with SQl.... it gets quite a task..... the other attributes can be used but
do not offer the level of accuracy that I am after.

I am interested to hear what other people are doing out there in order to
track inactive user accounts in Win2k.... (BTW in 2k3 our prayers are
answered with a replicated logon attribute..... but this is not in the near
timescale for me, so need another way.... )

Cheers

Jody
 
Hi Everyone

I am looking at producing a process to detect and remove inactive user
accounts.....

Have been looking at a number of options with lastlogon, whencreated,
password last set attributes etc. seen a few 3rd party utils....

Lastlogon would be good but it is not a replicated attribute which means I
need to query every single DC..... which is possible but quite intensive in
a large environment... and then the data has to be put together... probably
with SQl.... it gets quite a task..... the other attributes can be used but
do not offer the level of accuracy that I am after.

I am interested to hear what other people are doing out there in order to
track inactive user accounts in Win2k.... (BTW in 2k3 our prayers are
answered with a replicated logon attribute..... but this is not in the near
timescale for me, so need another way.... )

Cheers

Jody
Click to expand...


See tip 7358 and links in the 'Tips & Tricks' at http://www.jsiinc.com

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 
Back
Top