SBS2003 Client Computer cleanup

scottwoltjer
scottwoltjer used Ask the Experts™
on
I would like to delete computers that are no longer being used on a SBS2003. How can I tell the last time someone logged on to them or the last time is was turned on.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
One suggestion might be to check your DHCP Server to see if the computer has a current lease on it. DNS records may reveal if the computer has been active. If you don't have too many computers, ping them. If they resolve, they likely exist. If you get a response that they cannot be found, they likely don't exist. Be aware that deleting a computer in AD will result in that computer not being able to log back on to the network and if you don't know the local administrator password, you may get yourself into trouble.

Author

Commented:
We have people laid off and on vacation. Without turning every computer on this would not work.

Thanks for the help though.
Commented:
You can use VBScript for this.  Richard Meuller has a great script for this: http://www.rlmueller.net/Programs/MoveOldComputers.txt
11/26 Forrester Webinar: Savings for Enterprise

How can your organization benefit from savings just by replacing your legacy backup solutions with Acronis' #CyberProtection? Join Forrester's Joe Branca and Ryan Davis from Acronis live as they explain how you can too.

Shreedhar EtteTechnical Manager
Top Expert 2010

Commented:
Most Valuable Expert 2011

Commented:
We have people laid off and on vacation. Without turning every computer on this would not work.

Every machine is supposed to be on.  Windows Updates will not keep up and the machine account in active directory will expire if the machine is not left running.

The rest is part of proper network documentation which includes updating the documentation when someone leaves or if a machine is no longer needed or part of the Domain.

The final part is proper maintainece that involves removing a machine account from the Domain as soon as it is retired (which at least sounds like this part you are working on).


Author

Commented:
pwindell: your are all together correct. However I have inhereted this mess and now need to clean it up.

Thanks

Author

Commented:
Thanks
Most Valuable Expert 2011

Commented:
I understand.  I'm trying to clean up the networks at a couple Banks that are a mess too,..in addition to my full time job of being the IT Manager at an NBC Affiliate TV News Station.

The only dependable way I have found to deal with this it to physically walk around the facility and verify all the machine by their name, location, and the user that uses them.   Then afterward any machine found in AD that doesn't exist on your inventory list can be removed.

Also, just because the machine does not have a "human" at the moment does not mean it should be removed,...it just depends on if it is going to have a new human in the near future.  I always leave machines like this running right along with all the rest of them so that it remains "caught up" with and needed Windows Updates and other maintainence.

Sorry, I don't know of any magic bullet that will do this for you.  Any software solution is going to fail if a machine happens to be turned off of have the network cable unplugged.  Only a physical inspection is going to catch that.

But once you get all that out of the way,...one good free tool to help build documentation is Softperfect's Network Scanner.  It can save its results to an XML file or to a CSV file that can be brought into Excell (and I think a few other formats).

http://www.softperfect.com/products/networkscanner/

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial