thanks AL thanks Tom
Ok i used oldcmp. among others and the pwdlastset (oldcmp works great) came back feb 2000 even though the password expiration says march 20 2005. i dont think theres an issue with locating old accounts with pwdlastset the thing is what's up with a password expiration date of march 20 2005 if the pwdlastset is feb 2000. this password for pc account should get reset every 30 days. The ping was a great idea, we were planning on doing it. But our dns records are not so clean so u can ping a pc and get a response but its a different pc name when you ping -a ip address. DNS scavenging is getting turned on , but i think the issue may still exist. One last point. Can u or cant you expire a computer account in ad? i dont think you can , i tried to google it , next im callin ms to ask ,.but wanted to know what u folks opinion on it was. ----- Original Message ----- From: "Mulnick, Al" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Tuesday, March 15, 2005 2:10 PM Subject: RE: [ActiveDir] Can you expire a computer account in AD > He beat me to it ;0) > > You may also want to couple that with a simple ping method to validate if > the machine actually exists or not. Might cross reference it with DHCP/DNS > if ping is too much overhead. > > Just some thoughts. > > Al > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Tomasz Onyszko > Sent: Tuesday, March 15, 2005 1:55 PM > To: [email protected] > Subject: Re: [ActiveDir] Can you expire a computer account in AD > > P West wrote: > > We are trying to clean up old AD pc accounts. Have used every tool > > under the sun to come up with the pwdlastset to show old accounts. > > > > example > > One pc says the pwdlast set is feb 2000 when our ad guy looks at > > password expiration the dates are say march 20 2005. but the > > pwdlastset date is feb 2000. > > > > For some reason the pwdlastset is not updating or at least thats what > > im thinking. > > try to use Joe's oldcmp tool: > http://www.joeware.net/win/free/tools/oldcmp.htm > > > -- > Tomasz Onyszko [MVP] > [EMAIL PROTECTED] > http://www.w2k.pl > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
