I would personally suggest using VBS, and yes you are 100% correct that the lastlogin 
doesn't replicate to the DC's.  So as long as you only have a couple DC's you can 
compare them and then decide if the account should be disabled.  I have done somthing
similar at my company and it has worked quite well.

good scripting links
www.devguru.com or 
http://www.devguru.com/Technologies/vbscript/quickref/vbscript_intro.html for VBS 
inparticular
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scriptcenter/default.asp

regards
Shaun Gillissen




                                                                                       
                                              
                                                                                       
                                              
                                                        To:   "NT 2000 Discussions" 
<[EMAIL PROTECTED]>                            
                                                        cc:   (bcc: Shaun 
Gillissen/ANR/MS/PHILIPS)                                  
                                                        Subject:    Automating 
Disabling of Inactive User Accounts                   
                                                                                       
                                              
               "Turner, Robert D. Jr"                   Classification:                
                                              
               <[EMAIL PROTECTED]>                                                     
                                          
                                                                                       
                                              
               Sent by:                                                                
                                              
               [EMAIL PROTECTED]                                                       
                                  
               .com                                                                    
                                              
                                                                                       
                                              
               06/18/2003 09:04 AM                                                     
                                              
               Please respond to "NT 2000                                              
                                              
               Discussions"                                                            
                                              
                                                                                       
                                              
                                                                                       
                                              




We are looking for a way to automate the disabling of inactive user
Accounts.  We figure a scripting language should be able to do this.
I've not scripted/programmed since about 10 years ago and then it was
Clipper (dBase dialect) programming.  However, I do understand
programming logic, looping, subroutines, etc.  Program efficiency is not
a factor, but programmer (me) development time is.  Any suggestions as
to which scripting tool we should use?

If I recall correctly the last logon time which we would use to
determine inactivity is not replicated among the DCs so we would have to
query each DC.  Is this correct?

I also suspect there may be some third party tools to do this.  Ideally
they would work from the command line so we can Task Schedule it to run.

Any ideas?

Bob


CONFIDENTIALITY NOTICE: This E-Mail is intended only
for the use of the individual or entity to which it is addressed and may contain 
information that is privileged, confidential and exempt from disclosure under 
applicable law. If you have received this communication in error, please do not 
distribute and
delete the original message.  Please notify the sender by E-Mail at the address shown. 
Thank you for your compliance.


------
You are subscribed as [EMAIL PROTECTED]
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=nt2000&text_mode=&lang=english
 To unsubscribe send a blank email to %%email.unsub%%





------
You are subscribed as [EMAIL PROTECTED]
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=nt2000&text_mode=&lang=english
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to