Solved

Active Directory 2003

Posted on 2014-11-11
3
93 Views
Last Modified: 2014-11-27
Hello Experts,

I need to complete some house cleaning in active directory, which involves deleting stale computer accounts. We’re running Windows 2003 DC’s

I need to identify computer/server accounts that have not been active in AD for two months. I will then need to disable these accounts for a period of time and then delete them.
0
Comment
Question by:CNBELGIN
3 Comments
 
LVL 6

Expert Comment

by:Rob G
ID: 40435506
You will likely need the installation CD for 2k3 server,... But you can use the DSQuery tools from the adminpak.msi on the original installation CD.

The commands are:

To find inactive computer accounts (number is inactivity in weeks):
dsquery computer -inactive 2

To find computers with stale passwords (number is stale in days)
dsquery computer -stalepwd 45

You can get additional info on both of these tools with dsquery computer /? ,dsmod computer /?, and dsrm computer /?

Hope this helps..
0
 
LVL 35

Accepted Solution

by:
Joseph Daly earned 500 total points
ID: 40435668
I prefer to use oldcmp for this to remove the stale accounts. This allows you to use the LLTS and realage parameters to limit false positives.
http://www.joeware.net/freetools/tools/oldcmp/

Check out my article on good AD tools here.
http://www.experts-exchange.com/Software/Server_Software/Active_Directory/A_4221-Active-Directory-Administrator's-Tool-Kit.html
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now