The -inactive option uses lastLogonTimeStamp attribute which doesn't go "live" until you are in Windows 2003 Domain Functional Mode.
OldCmp will actually tell you this if you try to use it against a domain that doesn't currently support lastLogonTimeStamp and then go ahead and use the pwdLastSet attribute instead. joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ross Stingley Sent: Wednesday, January 26, 2005 5:21 PM To: [email protected] Subject: Re: [ActiveDir] Computer Account Cleanup FWIW, I'm in native mode in a Win2k domain and I got the same error message. ----- Original Message ----- From: "Free, Bob" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Wednesday, January 26, 2005 1:13 PM Subject: RE: [ActiveDir] Computer Account Cleanup I'm pretty sure the domain needs to be in native mode or will throw that error. ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Shaff Sent: Wednesday, January 26, 2005 12:26 PM To: [email protected] Subject: RE: [ActiveDir] Computer Account Cleanup I tried running this utility "dsquery computer domainroot -inactive 4" and received the following error message on our Windows 2003 Domain. dsquery failed:The parameter is incorrect.:Windows could not run this query because you are connected to a domain that does not support this query. type dsquery /? for help. I did not find "help" to be that helpful in resolving the issue. Does anyone have any ideas? Thanks, S ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tim Hines Sent: Tuesday, January 11, 2005 8:40 AM To: [email protected] Subject: Re: [ActiveDir] Computer Account Cleanup Joe's utility works for Windows 2000. I'm reading about it now. I don't think there is a MS utility to do this for windows 2000 but you could wrtie a script to query for pwdLastSet . I may have a copy of one but you probably be better off using Joe's tool. ----- Original Message ----- From: Aramide Adebanjo <mailto:[EMAIL PROTECTED]> To: [email protected] Sent: Tuesday, January 11, 2005 11:23 AM Subject: RE: [ActiveDir] Computer Account Cleanup Hi all, Is there one for windows 2000? This is also an issue i have tried resolving. regards -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tim Hines Sent: Tuesday, January 11, 2005 5:06 PM To: [email protected] Subject: Re: [ActiveDir] Computer Account Cleanup In windows 2003 you can use "dsquery computer -inactive or -stalepwd". Here is a link to the syntax. http://www.microsoft.com/resources/documentation/WindowsServ/2003/standa rd/proddocs/en-us/Defaultasp?url=/resources/documentation/WindowsServ/20 03/standard/proddocs/en-us/dsquery.asp <http://www.microsoft.com/resources/documentation/WindowsServ/2003/stand ard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/ 2003/standard/proddocs/en-us/dsquery.asp> ----- Original Message ----- From: Liz Vaibar <mailto:[EMAIL PROTECTED]> To: Active Directory Discussions ([email protected]) <mailto:[email protected])> Sent: Tuesday, January 11, 2005 10:41 AM Subject: [ActiveDir] Computer Account Cleanup Is there a free MS utility that allows you to identify and cleanup old computer accounts within AD? Any suggestions would be appreciated. Thanks, Liz List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
