• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1420
  • Last Modified:

Disable Inactive Active Directory Accounts POWERSHELL Script

I'm sure this has been done plenty of times but I can't seem to find a script that will disable active directory accounts (OU = Users) after 90 days of inactivity and move them to another OU called 'Users - Disabled'.  Would anyone be able to provide me with a powershell script that would do this?

Server 2008 Standard SP2
0
cmb991
Asked:
cmb991
  • 4
1 Solution
 
DraxonicCommented:
Does it have to be Powershell? I started writing a script of my own to do this, then found this one linked below, which did 90% of what I required and I just added a little customisation.

http://www.rlmueller.net/Programs/MoveOldComputers.txt
0
 
DraxonicCommented:
Ah, my mistake... this is for computer accounts, sorry.

It shouldn't be too difficult to change to user accounts, though.

To disable a user's account, set the UserAccountControl attribute to 0x0202 (0x002 + 0x0200)

http://support.microsoft.com/kb/305144
0
 
cmb991Author Commented:
What would be the best way to do this, powershell or VB?  I'm starting to rethink of this issue and trying to figure out the best way.
0
 
DraxonicCommented:
It doesn't really matter which way you do this.

In terms of programming, I understand that PS is more versatile for manipulation of Microsoft systems, but unless you're actually doing the programming, this is a moot point.

So, a choice of VB or PS is like a choice of bourbon or whiskey. Both will get you drunk, but it's simply a matter of which you prefer.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now