Solved

Need to remove dormant computer accounts from active directory.  What's a good (paid or free) solution?

Posted on 2014-09-03
3
415 Views
Last Modified: 2014-09-04
Need to remove dormant computer accounts from active directory.  What's a good (paid or free) solution?  

Also, does anyone know the default setting (in days) in which a computer account's status changes and must be re-added to the domain?  Thanks.
0
Comment
Question by:LB1234
3 Comments
 
LVL 14

Accepted Solution

by:
Brad Groux earned 400 total points
ID: 40301143
The term you are looking for is "stale," specifically stale computer objects. This TechNet blog post takes you through all of the steps - http://blogs.technet.com/b/ken_brumfield/archive/2008/09/16/identifying-stale-user-and-computer-accounts.aspx

Here is a script to find stale computer objects in Active Directory - http://gallery.technet.microsoft.com/scriptcenter/7bc5bc1c-e934-4ce1-8a77-3b0105807402

Here's one that utilizes Quest's free tools - http://gallery.technet.microsoft.com/Active-Directory-Stale-f775cc22

If a machine is offline more than 30 days it may become stale. Best practice is generally to query machines who have been offline for 90+ days. Stale machines won't be kicked from the domain, if they are plugged in or attached to the domain at any time they can log back in... thus, it is a good idea to clean out stale objects from time to time.

This blog post shows you how you can send out an automated email with stale accounts - http://pipe2text.com/?page_id=121
0
 
LVL 21

Assisted Solution

by:Joseph Moody
Joseph Moody earned 100 total points
ID: 40301150
Brad pretty much got you covered. If you prefer safety, you can disable the stale objects and move them to a dedicated OU. After a certain period, you can delete those objects.

http://deployhappiness.com/managing-stale-computers-and-users/
0
 
LVL 1

Author Closing Comment

by:LB1234
ID: 40303295
I wound up using AD Manager Plus from Manage Engine, but thanks!
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now