AD Computers and users

please let me know the best tool can provide the below information

last 30 days inactive users and computers
import and export all the users and computers in to excel sheet based on the their physical OUs
Any changes to the Active directory should alert to the listed users
   - adding new user/deleting user/
   - GPO change
  - any other valuable change on the AD
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Venugopal NCommented:
You can use the DSquery command to get the stale account

To get stale user/computer account as below.
dsquery computer domainroot -inactive 30
dsquery user domainroot -inactive 30

To get inactive account from specific OU
dsquery computer ou=OUname,dc=test,dc=example,dc=com -inactive 4

If you are looking for the Licensed tool , then you can use the tools like Activerole/Varonis to track/trigger the change on the AD object.Varonis also can be used to pull reports for inactive account,import the accounts based on the AD OU
This here will be your friend:

It has everything you listed plus more.

I prefer AD Info.

You'll like that.
Will SzymkowskiSenior Solution ArchitectCommented:
You can also do this via powershell. Try the following command...
Import-module activedirectory
$date = get-date
Get-ADUser -Filter * -Properties Name, sAMAccountName, DistinugishedName, LastLogonDate | 
? {$_.LastLogonDate -lt $date.addDays(-30) |
Select Name, sAMAccountName, DistinguishedName, LastLogonDate |
Export-csv "c:\StaleUserAndComputers.csv" -nti -append
Get-ADComputer -filter * -Properties DNSHostName, CanonicalName, LastLogonDate |
? {$_.LastLogonDate -lt $date.AddDays(-30) |
Select DNSHostName, CanonicalName, LastLogonDate |
Export-csv "c:\StaleUserAndComputers.csv" -nti -append

Open in new window


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
curAuthor Commented:
AD user account disable and reset options  .please let me know the practical usage on the each case . if I want to temporally inactivate the computer account , what is the right option  ?
Seth SimmonsSr. Systems AdministratorCommented:
I've requested that this question be closed as follows:

Accepted answer: 500 points for Will Szymkowski's comment #a40808421

for the following reason:

This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.