We help IT Professionals succeed at work.

GPO TO DISABLE  INACTIVE ACCOUNTS IN  AD 2008

Hunter24
Hunter24 asked
on
532 Views
Last Modified: 2014-11-25
I need to remove users and computers account that has not logged in to the network in the past 30 days (AD Cleanup). I want to create new OUs as "Disabled Users" and "Disabled Computers" and move these accounts to its corresponding container using a GPO. Can anyone please tell me how to accomplish this? Your feedback will be greatly appreciated.
Comment
Watch Question

Neil RussellTechnical Development Lead
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
CERTIFIED EXPERT
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
Hunter24Office 365 Support Engineer

Author

Commented:
Thank you for your fast response in this issue. However,  I still need you to clarify my doubts,  does that mean that I can create the OUs and the script will move the objects  to it? Can these OUs be created within the Users and computers Containers or should be created somewhere else? Can this script or any other be modified to automatically delete this objects after a certain amount of time assuming that they are in the Disabled container?
Technical Development Lead
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
Neil RussellTechnical Development Lead

Commented:
I can post an article tomorrow detailing exactly how its all done, with the scripts, if you  dont have a full answer by then.
CERTIFIED EXPERT
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
Hunter24Office 365 Support Engineer

Author

Commented:
Hi Neilsr
 If you have that article please post it here, it should be a very helpful guide in this process. Please note that Users and Computers ARE NOT  in the same OU as you explained. Under the domain tree there is a separate OU for each.

Hi becraig:

You got it! Points 1-3 in your answer is exactly what I need! Should I open a SEPARATE question for this script?Please advise. Thanks.
CERTIFIED EXPERT

Commented:
I would suggest that, in the powershell zone.

Though I can write it pretty quickly there are a lot of other experts who can contribute and get you the most efficient path.
Hunter24Office 365 Support Engineer

Author

Commented:
becraig:

I followed your recommendation and have just opened a new question in the powershell zone.
CERTIFIED EXPERT

Commented:
Great I'll take a look, I'm sure one of the guys might have already provided a solution by now.
Hunter24Office 365 Support Engineer

Author

Commented:
Thanks to both for your support, I'm using the AD Tidy app, it has helped me a lot.
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.