Joe's has a looooong list of tools that I am using to do
exactly that
that's one option
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Merry, Joel (US - Philadelphia)
Sent: Tuesday, November 14, 2006 4:45 PM
To: [email protected]
Subject: [ActiveDir] AD Audit/Compliance Tool
Hi All ... I'm looking for a tool
that will query all of the domains in a single forest and show me expired
accounts, accounts with passwords older than xx days, duplicate accounts
(accounts with the same samaccountname in different domains), accounts with
primary SMTP address of something other than @domain.com, @domain1.com,
@domain2.com, etc.
I'm scripting most of it now, but it's a pain. Any
suggestions?
Thanks,
Joel
This message (including any attachments) contains confidential
information intended for a specific individual and purpose, and is protected by
law. If you are not the intended recipient, you should delete this message and
are hereby notified that any disclosure, copying, or distribution of this
message, or the taking of any action based on it, is strictly prohibited.
