Solved

Active Directory disabled accounts

Posted on 2008-10-20
3
286 Views
Last Modified: 2010-05-18
Hi, can anyone tell me if Active directory cleanses out the disabled accounts or do I have to do it myself. We have never done it and it seems like we have a whole lot of disabled accounts with X's on them that are just cluttering up AD. Thanks
0
Comment
Question by:Thomas N
3 Comments
 
LVL 82

Assisted Solution

by:oBdA
oBdA earned 150 total points
Comment Utility
That you'll have to do yourself, luckily enough.
A disabled account is just that: a disabled account. There is no way for AD to know whether you'll still need it in a year or whether you want to get rid of it at some point.
0
 
LVL 16

Accepted Solution

by:
JoWickerman earned 350 total points
Comment Utility
Hi thomastxiee,

Unfortunately you have to do it yourself. I am currently busy clearing my active directory and deleting old user and PC accounts.

I have found a very nice script, named OldCmp, which detects accounts last used at least 90 days ago. With certain switches, you can run the script and it'll automatically delete disabled account for you.

http://www.joeware.net/freetools/tools/oldcmp/index.htm

Hope this helps you as much as it's helping me!

Cheers.
0
 

Author Closing Comment

by:Thomas N
Comment Utility
Thank you.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now