Wednesday, May 7, 2014

Cleaning up old user and computer accounts in Active Directory

Found a great tool today for finding old user and computer accounts on the network.

AD Tidy 

With this (GUI) tool you can scan for users or computer.  Once the scan is run it generates a report view that you can then use to perform a bunch of actions like:

-   Disable account/s
-   Move to an OU
-   Delete account/s
-   Set random password for the account/s
-   Set description on the account/s
-   Set and expiration date on the account/s
-   Run external scripts
-   Add to group
-   Remove from groups
-   Clear LDAP value/s
-   Set password to never expire
-   Delete home folder
-   And a bunch more

Most of the actions can be performed on more than one computer or user at a time.







Posted by at

6 comments:

  1. Absoblogginlutely!May 23, 2014 at 6:49 AM

    Hey Matt - I use oldcmp from Joeware (http://www.joeware.net/freetools/tools/oldcmp/) and then just run the following 3 commands to get rid of the old accounts. Quick and easy to do, especially if you automate it monthly ;-)
    Oldcmp -disable -unsafe -forreal
    oldcmp -delete -age 0 -onlydisabled -unsafe -forreal

    To see left over computers:-
    Oldcmp -report -age 0 -format csv

    Nice tip about adtidy - i've come across it and didn't realise it could also do things like the home folder changes.

    ReplyDelete
    Replies
    1. UnknownNovember 26, 2014 at 6:54 AM

      I guess I should visit my blog more often. I'm just now seeing this 6 months later lol. Joeware has a bunch of cool tools and I have used a few of them in the past. Great tip Andy!

      Delete
  2. Jhon DrakeNovember 14, 2014 at 6:05 AM

    This comment has been removed by the author.

    ReplyDelete
  3. Rupesh KumarMay 10, 2019 at 6:19 AM

    Thanks, it's really very informative about how clean old computer account in active directory. I found the familiar information about this topic from http://www.esystool.com/cleanup-active-directory-with-powershell/ It's also provide very good information related to how to find out and clean old/inactive user and computer accounts in active directory and generate comprehensive report which are based on inactive or old user/computer accounts and actual last logon details of accounts.

    ReplyDelete
  4. THE SMALL BUSINESS NETOWRKOctober 27, 2019 at 5:03 PM

    Thanks for a very interesting blog. What else may I get that kind of info written in such a perfect approach? I’ve a undertaking that I am simply now operating on, and I have been at the look out for such info. Buy LinkedIn Accounts with connections

    ReplyDelete
  5. THE SMALL BUSINESS NETOWRKMarch 11, 2020 at 4:39 PM

    hello!! Very interesting discussion glad that I came across such informative post. Keep up the good work friend. Glad to be part of your net community. Buy Aged LinkedIn Account

    ReplyDelete

Subscribe to: Post Comments (Atom)