Solved

Identify and clean up inactive domain systems in computer OU and DNS

Posted on 2012-04-09
5
1,280 Views
Last Modified: 2012-05-24
Hello,

We have a mix of WIN2K3 and WIN2K8 systems.  The mix of the two version of the OS includes our domain controller servers.  

There are a lot of domain system which are no longer on the network.  We are trying to identify these systems and remove them from the Computer OU and also from DNS console.  

Please advise if you have an idea of how to do this.

Thanks.
0
Comment
Question by:nav2567
5 Comments
 
LVL 21

Accepted Solution

by:
Joseph Moody earned 250 total points
Comment Utility
To clean up DNS, enable DNS scavenging. http://technet.microsoft.com/en-us/library/cc757041(v=WS.10).aspx

To clean up your computer accounts, you can download Active Directory Janitor or do a custom AD query.

In Active Directory Users and Computers, go to Saved Queries. Right Click and create a new query. This custom query will show you computers not used in a year: (&(objectClass=computer)(lastLogontimestamp<=129417875990000000))

Always check first to verify that the computer isn't in use.
0
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 250 total points
Comment Utility
A couple of ways to tackle this

I like oldcmp by Joe Richards   http://www.joeware.net/freetools/tools/oldcmp/

If you prefer GUI tools then look at adtidy  http://www.cjwdev.co.uk/Software/ADTidy/Info.html

Both tools are free and do an excellent job.  

In terms of DNS, you will want to enable scavenging to clear out some of those old/stale records, good blog entry here   http://blogs.technet.com/b/networking/archive/2008/03/19/don-t-be-afraid-of-dns-scavenging-just-be-patient.aspx

Thanks

Mike
0
 
LVL 10

Expert Comment

by:Prashant Girennavar
Comment Utility
You can use Joe's OldCmp tool as Mike suggested . Its a great tool to identify and remove old computer accounts.

And to clear old DNS entries you can enable scavenging in DNS as others have suggested.

Additionally if you love to use scripts to find out the OLD computers and delete them then refer below articles which includes the scripts.

http://jeffwouters.nl/index.php/2011/10/powershell-removing-old-computer-accounts-from-your-active-directory/

http://blogs.technet.com/b/heyscriptingguy/archive/2008/11/19/how-can-i-find-old-computer-accounts.aspx

Regards,

_Prashant_
0
 

Author Comment

by:nav2567
Comment Utility
All I am trying to accomplish right now is just to list all inactive domain computers for more than 90 days.  

Can someone who knows power shell take a look at this and see if this is the right one?

http://gallery.technet.microsoft.com/scriptcenter/6b8163d1-5fae-43b5-a664-a2d1f6e1e2da

Again, I just want to list but NOT TO DELETE COMPUTER FROM AD.

Thanks again ; )
0
 

Author Closing Comment

by:nav2567
Comment Utility
Thanks.
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now