it is in oldcmp:
oldcmp -llts
[EMAIL PROTECTED] wrote:
I read this somewhere and had to confirm. Looks like if you're 2003 domain functional - lastLogonTimestamp works for computers as well. Unfortunately, it's not exposed in tools like DSGET. Maybe joe will add this as a switch to oldcmp - as well as user accounts.
-m
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of P West Sent: Tuesday, March 15, 2005 3:24 PM To: [email protected] Subject: Re: [ActiveDir] Can you expire a computer account in AD
That's exacctly what i intend to do. Disable those suckers.
thanks all
----- Original Message ----- From: "Mulnick, Al" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Tuesday, March 15, 2005 2:44 PM
Subject: RE: [ActiveDir] Can you expire a computer account in AD
Because it derives from the User class, I can't think of a reason why
you
couldn't set that value. I'm not sure (and have no way to test at the moment) if that value would be valid for what you're doing however.
You could just disable the computer accounts vs. expire them. That's available from the GUI if you want to access it that way else it's scriptable.
al
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of P West Sent: Tuesday, March 15, 2005 2:28 PM To: [email protected] Subject: Re: [ActiveDir] Can you expire a computer account in AD
thanks AL thanks Tom
Ok i used oldcmp. among others and the pwdlastset (oldcmp works great)
came
back feb 2000 even though the password expiration says march 20 2005.
i dont think theres an issue with locating old accounts with
pwdlastset the
thing is what's up with a password expiration date of march 20 2005 if
the
pwdlastset is feb 2000. this password for pc account should get reset
every
30 days.
The ping was a great idea, we were planning on doing it. But our dns records are not so clean so u can ping a pc and get a response but its
a
different pc name when you ping -a ip address. DNS scavenging is
getting
turned on , but i think the issue may still exist.
One last point. Can u or cant you expire a computer account in ad? i
dont
think you can , i tried to google it , next im callin ms to ask ,.but
wanted
to know what u folks opinion on it was. ----- Original Message ----- From: "Mulnick, Al" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Tuesday, March 15, 2005 2:10 PM Subject: RE: [ActiveDir] Can you expire a computer account in AD
He beat me to it ;0)
You may also want to couple that with a simple ping method to
validate if
the machine actually exists or not. Might cross reference it with
DHCP/DNS
if ping is too much overhead.
Just some thoughts.
Al
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tomasz
Onyszko
Sent: Tuesday, March 15, 2005 1:55 PM To: [email protected] Subject: Re: [ActiveDir] Can you expire a computer account in AD
P West wrote:
We are trying to clean up old AD pc accounts. Have used every
tool
under the sun to come up with the pwdlastset to show old accounts.
example One pc says the pwdlast set is feb 2000 when our ad guy looks at password expiration the dates are say march 20 2005. but the pwdlastset date is feb 2000.
For some reason the pwdlastset is not updating or at least thats
what
im thinking.
try to use Joe's oldcmp tool: http://www.joeware.net/win/free/tools/oldcmp.htm
-- Tomasz Onyszko [MVP] [EMAIL PROTECTED] http://www.w2k.pl List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
