Querying AD for dead computers

rhysduck · 16 May 2011 at 14:41

Afternoon,

I'm trying to source a solution to enable me to query an Active Directory server (Server 2003 and Server 2008) to find computers joined to the domain that have not talked back to Active Directory for a certain length of time (EG: 3 months) and then delete them accordingly (or run netdom to remove).

Anyone aware of such a script / bat file etc to do this? Google is turning up trumps at the moment.
Thanks.

RichIbizaSport · 16 May 2011 at 14:56

http://www.joeware.net/freetools/tools/oldcmp/index.htm

Old, but looks like it would do the job.

Coldzero · 16 May 2011 at 14:57

http://gallery.technet.microsoft.com/scriptcenter/6b8163d1-5fae-43b5-a664-a2d1f6e1e2da

ecksmen · 16 May 2011 at 20:18

I really wouldn't recommend deleting stale computer accounts, especially automatically - move to a separate OU and disable in the first instance.

LizardKing · 16 May 2011 at 20:27

RichIbizaSport said:
http://www.joeware.net/freetools/tools/oldcmp/index.htm

Old, but looks like it would do the job.

Oldcmp is great for this! does user accounts as well

ecksmen said:
I really wouldn't recommend deleting stale computer accounts, especially automatically - move to a separate OU and disable in the first instance.

And this!

MasterPlan1 · 17 May 2011 at 16:29

Why hasn't DS been mentioned?

dsquery computer -inactive Xweeks | dsrm computer

or

dsquery computer -inactive Xweeks | dsget computer -samid

Or omit the piped information to get the OU location of it.

Peice of ****.

topher · 17 May 2011 at 19:59

MasterPlan1 said:
Why hasn't DS been mentioned?

dsquery computer -inactive Xweeks | dsrm computer

or

dsquery computer -inactive Xweeks | dsget computer -samid

Or omit the piped information to get the OU location of it.

Peice of ****.

thats what I use, then dsmod to disable them.

mraerosmith1981 · 17 May 2011 at 20:56

topher said:
thats what I use, then dsmod to disable them.

Thats a +1 for this here, exactly how we do this in work

smargh · 18 May 2011 at 01:51

Powershell and the Quest AD cmdlets - I use PS all the time.

Beware of scripts on the MS script gallery site though - they often do things using very inefficient methods. There are often better ways of doing things.

Also, +1 for moving unused computers to their own graveyard rather than deleting them- - useful for proper CMDB asset tracking & inventory etc.