Crappy terminology on my part. I should have said "2003 functional level" (he had already specified it was a 2003 domain)
"When the domain functional level has been set to Windows Server 2003, a new lastLogonTimestamp attribute is used to track the last logon time of a user or computer account...etc" For this exercise, I'd toss dsquery in a heartbeat anyway and use OldCmp, it's orders of magnitude better. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ross Stingley Sent: Wednesday, January 26, 2005 2:21 PM To: [email protected] Subject: Re: [ActiveDir] Computer Account Cleanup FWIW, I'm in native mode in a Win2k domain and I got the same error message. ----- Original Message ----- From: "Free, Bob" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Wednesday, January 26, 2005 1:13 PM Subject: RE: [ActiveDir] Computer Account Cleanup I'm pretty sure the domain needs to be in native mode or will throw that error. ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Shaff Sent: Wednesday, January 26, 2005 12:26 PM To: [email protected] Subject: RE: [ActiveDir] Computer Account Cleanup I tried running this utility "dsquery computer domainroot -inactive 4" and received the following error message on our Windows 2003 Domain. dsquery failed:The parameter is incorrect.:Windows could not run this query because you are connected to a domain that does not support this query. type dsquery /? for help. I did not find "help" to be that helpful in resolving the issue. Does anyone have any ideas? Thanks, S ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tim Hines Sent: Tuesday, January 11, 2005 8:40 AM To: [email protected] Subject: Re: [ActiveDir] Computer Account Cleanup Joe's utility works for Windows 2000. I'm reading about it now. I don't think there is a MS utility to do this for windows 2000 but you could wrtie a script to query for pwdLastSet . I may have a copy of one but you probably be better off using Joe's tool. ----- Original Message ----- From: Aramide Adebanjo <mailto:[EMAIL PROTECTED]> To: [email protected] Sent: Tuesday, January 11, 2005 11:23 AM Subject: RE: [ActiveDir] Computer Account Cleanup Hi all, Is there one for windows 2000? This is also an issue i have tried resolving. regards -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tim Hines Sent: Tuesday, January 11, 2005 5:06 PM To: [email protected] Subject: Re: [ActiveDir] Computer Account Cleanup In windows 2003 you can use "dsquery computer -inactive or -stalepwd". Here is a link to the syntax. http://www.microsoft.com/resources/documentation/WindowsServ/2003/standa rd/proddocs/en-us/Defaultasp?url=/resources/documentation/WindowsServ/20 03/standard/proddocs/en-us/dsquery.asp <http://www.microsoft.com/resources/documentation/WindowsServ/2003/stand ard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/ 2003/standard/proddocs/en-us/dsquery.asp> ----- Original Message ----- From: Liz Vaibar <mailto:[EMAIL PROTECTED]> To: Active Directory Discussions ([email protected]) <mailto:[email protected])> Sent: Tuesday, January 11, 2005 10:41 AM Subject: [ActiveDir] Computer Account Cleanup Is there a free MS utility that allows you to identify and cleanup old computer accounts within AD? Any suggestions would be appreciated. Thanks, Liz List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
