|
Identifying Unused Accounts |
|
Wednesday, 11 June 2008 |
|
Every now and again, the need on a network may arise where you need to identify network accounts that have not logged onto the network for an extended period of time. After discussing several options, they came up with the following solution: use the DSQUERY computer -inactive NumberOfWeeks command to identify all machines that were not logged on to Active Directory during the specified NumberOfweeks. DSQUERY computer -inactive NumberOfWeeks Note that the command above should be used if your domain is running at the Windows Server 2003 functional level. If your domain still has Windows 2000 computers in it and is running in the mixed-mode functional level, use: DSQUERY computer -stalepwd NumberOfDays
|