It Depends. How much of a mobile user base do you have? How much vacation time do your employees accrue? How consistently are local admin accounts and passwords changed -- if you need to add a machine back in? How sensitive are your users to the 20 minutes of downtime one might encounter if his laptop were erronesouly removed? How sensitive are your mobile users to the day or two of downtime if one's computer account is erroneously removed? Are your computer accounts for mobile computers in a different OU than desktop computers?
Typical answers I have hear are usually in the 1-2 month range. For mobile users, like a sales force, or customer reps, I'd feel safer with a target closer to 3-6 months, especially if OWA or equivalent functionality is available without logging on the network. Keep in mind the users who tend to get hit on something like this, at least in some organizations, are executives, since they often have assistants and don't need to use their own PCs as much. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John F. Hann Sent: Wednesday, March 19, 2003 2:54 PM To: ActiveDir List Subject: [ActiveDir] Old Computer Accts Given that active computers change their domain password every 7 days by default, how old of a last modified date would you guys suggest be used for deletion? John Hann BancorpSouth 662.678.7179 List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
