funny enough I've just done the job today on my domain with :-http://www.lanicu.com/index.cfm/products/ump
Rob
| Jorge de Almeida Pinto
<[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED] 22/12/2003 16:10
|
|
Hi Rich,
Try the following:
MS-KBQ197478: HOWTO: How to Detect and Remove Inactive Machine Accounts
QUOTE
This procedure uses batch files and resource kit utilities to create a list
of machine accounts sorted by the last time the machine account's password
was updated. The list then needs to be examined by an administrator to
remove all machine accounts that are deemed active, leaving only the old
machine accounts in the remaining list. The remaining list is then read by a
batch file that systematically deletes the old machine accounts using
Windows NT resource kit utilities.
UNQUOTE
Regards,
Jorge
-----Original Message-----
From: Rich Milburn
To: [EMAIL PROTECTED]
Sent: 12/22/2003 4:59 PM
Subject: [ActiveDir] inactive computers question
I know that dsquery and dsrm are good for AD2003 environments to find
and remove inactive computer accounts in AD, as is Robbie's script.
Someone on the SMS list has AD 2000 though, dsquery doesn't work, and
Robbie's script is returning nothing. Even if the info is not easily
convertible to a date, seems like you should be able to sort by a column
in a csvde export and see the same information - i.e. sort by
pwdLastSet? Any ideas? It looked like lastLogonTimestamp might be a
good one... but alas that's new with 2003 so that's no good for him. The
main source of my confusion is that dsquery and a sort by pwdLastSet do
not show the same computers as being inactive the longest.
Thanks
Rich
-------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE-------
PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message
or any attachments. This information is strictly confidential and may be
subject to attorney-client privilege. This message is intended only for
the use of the named addressee. If you are not the intended recipient of
this message, unauthorized forwarding, printing, copying, distribution,
or using such information is strictly prohibited and may be unlawful. If
you have received this in error, you should kindly notify the sender by
reply e-mail and immediately destroy this message. Unauthorized
interception of this e-mail is a violation of federal criminal law.
Applebee's International, Inc. reserves the right to monitor and review
the content of all messages sent to and from this e-mail address.
Messages sent to or from this e-mail address may be stored on the
Applebee's International, Inc. e-mail system.
This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
****************************************************************************
This E-mail and any files transmitted with it are in commercial confidence
and intended solely for the use of the individual or entity to whom they are
addressed. If you have received this E-mail in error please notify the
Administrator by E-mail. Any views or opinions expressed are solely those of
the author and do not necessarily represent those of DEK International or
its affiliates. [EMAIL PROTECTED]
****************************************************************************
This footnote also confirms that this message has been checked for the
presence of computer viruses.
http://www.dek.com
****************************************************************************
