Active Directory Tool

Darrin Crawford
Darrin Crawford used Ask the Experts™
on
I am looking for an AD tool to check accounts whose password is set to never change.
Also to remove computers/Users, who haven't been on the network for a period of 3 months or more.

thanks
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Shaun VermaakTechnical Specialist
Awarded 2017
Distinguished Expert 2018

Commented:
Distinguished Expert 2018

Commented:
There are a number of tools out there such as ADManager (which I use at my job) or UMRA.
Klavs RDeveloper, owner of AlbusBit

Commented:
For reporting part, You can try my AD reporting tool - AD FastReporter Free.
There you can easily find user accounts whose password is set to never change and computers/users who haven't logged on for a period of 3 months or more.
Should you be charging more for IT Services?

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

E ATech Lead

Commented:
You can easily locate Active Directory accounts with passwords set to Never Expire:
https://community.spiceworks.com/how_to/128015-how-to-locate-active-directory-accounts-with-passwords-set-to-never-expire

There are tools to do such task easily like; Lepide and Managengine.

Hope this helps!
There's a PowerShell solution that allows you to cleanup: http://www.adaxes.com/blog/cleanup-active-directory-with-powershell.html

You can also use 3rd party tools for auditing and automation as well as AD cleanup with additional bells and whistles like conditions, approvals, etc.: http://www.adaxes.com/blog/how-to-keep-your-active-directory-clean.html

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial