asked on

ACTIVE DIRECTORY - OLD COMPUTER AND USER RECORDS

Hello, I need to clead up AD on our W2k3 DC's. There are a number of computer and user records that are no longer in use/valid. A manual clean up will take to long and chances are we will miss a few.

Is there a recomended automated process and or utility that will help clean up AD?

Many Thanks, Aelara.

Greg Besso

I think that you need to evaluate "too long", and find out if you can put better maintenance habits in place. Then, going forward, you can avoid these issues. But for now you may need to just play catch up and manually clean up the environment.
But aside from buying some 3rd party utility, you may be able to speed up your cleaning up by reviewing DSQUERY (http://technet.microsoft.com/en-us/library/cc732952(WS.10).aspx)
You can create some scripts that find, and even move around objects in AD based on inactivity, etc.

meraydin2

You can try this one (I've written)
ADCleanupUtility.exe

meraydin2

Usage: Select the AD version, specify number of days to look for, click find. After you've got the results, select the records from the row-selector section. If desired click Delete Objects.

Aelara

ASKER

Thanks Meraydin2, i assume this executable is tried and tested? No health warnings attached? Is there anything I should look out for? If it works, Bang, Problem solved.

Kind Regards, Aelara.

ASKER CERTIFIED SOLUTION

meraydin2

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial