He beat me to it ;0)

You may also want to couple that with a simple ping method to validate if
the machine actually exists or not.  Might cross reference it with DHCP/DNS
if ping is too much overhead.

Just some thoughts.

Al 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tomasz Onyszko
Sent: Tuesday, March 15, 2005 1:55 PM
To: [email protected]
Subject: Re: [ActiveDir] Can you expire a computer account in AD

P West wrote:
> We are trying to clean up old AD pc accounts.  Have used every tool 
> under the sun to come up with the pwdlastset to show old accounts.
> 
> example
> One pc says the pwdlast set is feb 2000 when our ad guy looks at 
> password expiration the dates are say march 20 2005.  but the 
> pwdlastset date is feb 2000.
> 
> For some reason the pwdlastset is not updating or at least thats what 
> im thinking.

try to use Joe's oldcmp tool:
http://www.joeware.net/win/free/tools/oldcmp.htm


--
Tomasz Onyszko [MVP]
[EMAIL PROTECTED]
http://www.w2k.pl
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to