Cleanup Active Directory

Posted on 2013-09-17
Medium Priority
Last Modified: 2013-09-18
I would like to clean up some of the objects in Active Directory that are no longer being used.  Mostly the objects consist of workstations and users.  Is there a tool that I can use to identify which of these objects have not accessed the network in x amount of time so I can review them and decide if they can be removed?
Question by:NytroZ
LVL 18

Accepted Solution

Emmanuel Adebayo earned 2000 total points
ID: 39500346
Yes, there is a free tool to clean up your Active Directory domain by identifying unused user and computer accounts. This application will search your Active Directory domain for user/computer accounts that match your search criteria, then you can perform a number of actions.

Get the tools from the microsft TechNet site below


LVL 57

Expert Comment

by:Mike Kline
ID: 39500356
A few tools that I recommend


old computer by MVP Joe Richards, has a lot of safety features and works for both users and computers



Free GUI based tool that can help ID and disable old accounts.

We disable after 90 days and delete after 180


LVL 24

Expert Comment

ID: 39501641
You can also use dsquery command to find inactive computers/users.

As an example, the following command will find all computers in Active Directory that have not been logged into during the past 8 weeks:
dsquery computer -inactive 8
dsquery user -inactive 8

similar thread see this multiple options.


Hope this helps

Featured Post

Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
Scripts are great for performing batch jobs against users, however sometimes the GUI is all you need.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question