• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 308
  • Last Modified:

Active Directory disabled accounts

Hi, can anyone tell me if Active directory cleanses out the disabled accounts or do I have to do it myself. We have never done it and it seems like we have a whole lot of disabled accounts with X's on them that are just cluttering up AD. Thanks
0
Thomas N
Asked:
Thomas N
2 Solutions
 
oBdACommented:
That you'll have to do yourself, luckily enough.
A disabled account is just that: a disabled account. There is no way for AD to know whether you'll still need it in a year or whether you want to get rid of it at some point.
0
 
JoWickermanCommented:
Hi thomastxiee,

Unfortunately you have to do it yourself. I am currently busy clearing my active directory and deleting old user and PC accounts.

I have found a very nice script, named OldCmp, which detects accounts last used at least 90 days ago. With certain switches, you can run the script and it'll automatically delete disabled account for you.

http://www.joeware.net/freetools/tools/oldcmp/index.htm

Hope this helps you as much as it's helping me!

Cheers.
0
 
Thomas NSystems Analyst - Windows System AdministratorAuthor Commented:
Thank you.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now