You can use dsquery computer -inactive (or user -inactive). > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: Wednesday, March 16, 2005 21:09 > To: [email protected] > Subject: RE: [ActiveDir] Can you expire a computer account in AD > > I read this somewhere and had to confirm. Looks like if > you're 2003 domain functional - lastLogonTimestamp works for > computers as well. > Unfortunately, it's not exposed in tools like DSGET. Maybe > joe will add this as a switch to oldcmp - as well as user accounts. > > -m > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of P West > Sent: Tuesday, March 15, 2005 3:24 PM > To: [email protected] > Subject: Re: [ActiveDir] Can you expire a computer account in AD > > That's exacctly what i intend to do. Disable those suckers. > > > thanks all > ----- Original Message ----- > From: "Mulnick, Al" <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Tuesday, March 15, 2005 2:44 PM > Subject: RE: [ActiveDir] Can you expire a computer account in AD > > > > Because it derives from the User class, I can't think of a > reason why > you > > couldn't set that value. I'm not sure (and have no way to > test at the > > moment) if that value would be valid for what you're doing however. > > > > You could just disable the computer accounts vs. expire > them. That's > > available from the GUI if you want to access it that way else it's > > scriptable. > > > > al > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of P West > > Sent: Tuesday, March 15, 2005 2:28 PM > > To: [email protected] > > Subject: Re: [ActiveDir] Can you expire a computer account in AD > > > > thanks AL > > thanks Tom > > > > > > > > Ok i used oldcmp. among others and the pwdlastset (oldcmp > works great) > came > > back feb 2000 even though the password expiration says > march 20 2005. > > > > i dont think theres an issue with locating old accounts with > pwdlastset > the > > thing is what's up with a password expiration date of march > 20 2005 if > the > > pwdlastset is feb 2000. this password for pc account should > get reset > every > > 30 days. > > > > The ping was a great idea, we were planning on doing it. > But our dns > > records are not so clean so u can ping a pc and get a > response but its > a > > different pc name when you ping -a ip address. DNS scavenging is > getting > > turned on , but i think the issue may still exist. > > > > One last point. Can u or cant you expire a computer > account in ad? i > dont > > think you can , i tried to google it , next im callin ms to > ask ,.but > wanted > > to know what u folks opinion on it was. > > ----- Original Message ----- > > From: "Mulnick, Al" <[EMAIL PROTECTED]> > > To: <[email protected]> > > Sent: Tuesday, March 15, 2005 2:10 PM > > Subject: RE: [ActiveDir] Can you expire a computer account in AD > > > > > > > He beat me to it ;0) > > > > > > You may also want to couple that with a simple ping method to > validate > if > > > the machine actually exists or not. Might cross reference it with > > DHCP/DNS > > > if ping is too much overhead. > > > > > > Just some thoughts. > > > > > > Al > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] On Behalf Of Tomasz > Onyszko > > > Sent: Tuesday, March 15, 2005 1:55 PM > > > To: [email protected] > > > Subject: Re: [ActiveDir] Can you expire a computer account in AD > > > > > > P West wrote: > > > > We are trying to clean up old AD pc accounts. Have used every > tool > > > > under the sun to come up with the pwdlastset to show > old accounts. > > > > > > > > example > > > > One pc says the pwdlast set is feb 2000 when our ad guy looks at > > > > password expiration the dates are say march 20 2005. but the > > > > pwdlastset date is feb 2000. > > > > > > > > For some reason the pwdlastset is not updating or at least thats > what > > > > im thinking. > > > > > > try to use Joe's oldcmp tool: > > > http://www.joeware.net/win/free/tools/oldcmp.htm > > > > > > > > > -- > > > Tomasz Onyszko [MVP] > > > [EMAIL PROTECTED] > > > http://www.w2k.pl > > > List info : http://www.activedir.org/List.aspx > > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx > > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
