Correct, definitely another option.
However consider what I wrote in my previous note, do you
want to go through this check every time? Maybe the answer is yes, but that one
time it gets dropped somehow and you have to explain why you were told 10 times
over the last 24 months that it should be kept and then the person was out
of the office and didn't get your message in time so you smoke the account
because the 11th time they didn't respond. That can be a tough one to sit still
for. Best to get some sort of system in place to handle the life cycle properly
and during cleanup is a good time to start doing that so your cleanup work can
be leveraged and extended long term.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kamlesh Parmar
Sent: Friday, April 28, 2006 3:50 PM
To: [email protected]
Subject: Re: [ActiveDir] Cleanup of AD accounts
On 4/28/06, Rimmerman,
Russ <
[EMAIL PROTECTED]> wrote:
Joe - I sent you an e-mail, I figured maybe going to this list might get more input on this question as well:If I wanted to run an oldcmp -report 120 -users -sort cn -f "(&(objectcategory=person)(objectclass=user))" -format csv -delim ,and then send it out to our remote administrators to 'remove any accounts you don't want disabled'and then take the final list and disable all remaining accounts that they didn't flag as still being used, how would I accomplish that?Is there a way to have oldcmp use a modified file as an import file for the accounts to disable? Our problem is we don't want to disable any service accounts that are actively being used, but we have a LOT of cleanup to do. How does everyone else handle this?Thanks a bunch,Russ
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This e-mail is confidential, may contain proprietary information
of the Cooper Cameron Corporation and its operating Divisions
and may be confidential or privileged.
This e-mail should be read, copied, disseminated and/or used only
by the addressee. If you have received this message in error please
delete it, together with any attachments, from your system.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Be the change you want to see in the World"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
