[gptalk] Re: Finding active users

The problem I've always had with finding active or enactive user accounts are:

1. Mac users that use Outlook for email, they have a valid user account, but 
they may never login, they only authinicated for the purpose of accessing there 
mailbox.

2. Service accounts

There are alot of scripts you can write/download to query a DC for user 
information. 
http://www.microsoft.com/technet/scriptcenter/scripts/default.mspx?mfr=true 
that is only one site, google can really be your friend. 

I've never had a large budget so I've always had to do things on a shoe string. 
I'm currently covering most of my vbscripts to powershell or hta.

The one thing that has helped me the most is to document any special accounts  
so when someone goes looking for inactive accounts they don't delete hundreds 
of Mac users or all of my service accounts. 

Take Care and Have Fun --John

 -------------- Original message ----------------------
From: "Ray Lewis" <ray@xxxxxxxxxxxxxxx>
> Been down this road and tried a few different products myself. The only one
> I found that didn't give me erroneous information was AD Janitor by Specops.
> http://www.specopssoft.com/products/adjanitor/
> 
>  
> 
>  
> 
>   _____  
> 
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of Mike Johnston
> Sent: 25 June 2008 03:29
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Finding active users
> 
>  
> 
> Howdy all... Our domain has kind of gotten out of control with users coming
> and going and I'd like to get control of it.  What is the best way to build
> a list of current active users on my Windows 2003 domain?  We have many that
> haven't logged in for over 6 months so there accounts are sitting and
> waiting for a password change.  Is there a way (or a script) that print out
> last long on or which accounts are waiting for a password change?  We don't
> expire our accounts, just the password.  Any help would be great!
>
--- Begin Message ---

Been down this road and tried a few different products myself… The only one I found that didn’t give me erroneous information was AD Janitor by Specops. http://www.specopssoft.com/products/adjanitor/

 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Mike Johnston
Sent: 25 June 2008 03:29
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Finding active users

 

Howdy all... Our domain has kind of gotten out of control with users coming and going and I'd like to get control of it.  What is the best way to build a list of current active users on my Windows 2003 domain?  We have many that haven't logged in for over 6 months so there accounts are sitting and waiting for a password change.  Is there a way (or a script) that print out last long on or which accounts are waiting for a password change?  We don't expire our accounts, just the password.  Any help would be great!


--- End Message ---

Other related posts: