looking for tools/scripts to clean up unused AD accounts

December 4, 2005

Hello everyone.

I am looking for tools/scripts to clean up unused AD accounts

Background:

- Active Directory is one of the key repositories for system and user accounts.
- Various licensing systems use AD as an indicator of the number of
licenses needed to cover the environment.
- AD is known to have entries for systems and people that are no
longer with the organization.

Basic problem statement:

- We need accurate counts of active machines and users in the
environment and have not been able to generate the necessary reports
using the existing tools and processes.
- We need an automated process whereby we can generate accurate
reports on a regular basis.

I’ve identified a number of tools and processes we may be able to use
as interim solutions.
+ LogParser used to query ActiveDirectory directly
+ SystemTools free utility “NetPwAge”
(http://www.systemtools.com/download/netpwage.zip)

Can any one recommend or give insight on how they have done it at their company?

Peter.

- Post this on the activedirectory listserve..topics like these get asked
all the time….

http://www.activedir.org/List.aspx

OldCmp:

http://www.joeware.net/win/free/tools/oldcmp.htm

RE: [ActiveDir] Cleaning up Stale entries in AD:

http://www.mail-archive.com/activedir@mail.activedir.org/msg34047.html

- This may help …

http://wm.quest.com/products/ActiveDirectory/

Jay

-

Posted in Q & A