[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1904
  • Last Modified:

Is there a way to make computer account expire in active directory

Is there a way to make computer account expire in active directory?
I have ~300 computer accounts there and only about 100 PC's actually, so I am trying to find dead accounts that wasnt removed from Active directory when computer was actually removed from building.
If I could set exparation time for account somewhere it would clean itself.

Thank you.
  • 2
1 Solution
To find dead accounts you can use either dsquery or look at oldcmp (http://www.joeware.net/freetools/index.htm), computers change their passwords every 30 days so you can check for computers that have stale passwords.
Unfortunately you cant get the computer object to automatically delete after a period of time though.

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now