Cleaning out old objects in AD

Best way to clean out old objects in AD? I have some that have been in there for years.
Thomas NSystems Analyst - Windows System AdministratorAsked:
Who is Participating?
Kevin StanushConnect With a Mentor Application DeveloperCommented:
It depends on the type of object (user, computer, ?).  For users, looking at the pwdlastset and lastlogontimestamp attributes works well.  Same for computers, more or less. We tell our customers of our Hyena software product to look at both and then move into an 'inactive' OU for a while before deleting.

Here is an article that shows several methods including Hyena:
Hello ThereConnect With a Mentor System AdministratorCommented:
Naveen SharmaConnect With a Mentor Commented:
Below articles can help you to Keep Active Directory Clean with PowerShell

Additionally, you may also try this active directory cleanup solution which assists to find and clean inactive AD accounts.
Seth SimmonsSr. Systems AdministratorCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

-- Kevin Stanush (https:#a42469417)
-- Hello There (https:#a42469436)
-- Naveen Sharma (https:#a42469994)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

Experts-Exchange Cleanup Volunteer
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.