That's exacctly what i intend to do. Disable those suckers.
thanks all ----- Original Message ----- From: "Mulnick, Al" <[EMAIL PROTECTED]> To: <ActiveDir@mail.activedir.org> Sent: Tuesday, March 15, 2005 2:44 PM Subject: RE: [ActiveDir] Can you expire a computer account in AD > Because it derives from the User class, I can't think of a reason why you > couldn't set that value. I'm not sure (and have no way to test at the > moment) if that value would be valid for what you're doing however. > > You could just disable the computer accounts vs. expire them. That's > available from the GUI if you want to access it that way else it's > scriptable. > > al > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of P West > Sent: Tuesday, March 15, 2005 2:28 PM > To: ActiveDir@mail.activedir.org > Subject: Re: [ActiveDir] Can you expire a computer account in AD > > thanks AL > thanks Tom > > > > Ok i used oldcmp. among others and the pwdlastset (oldcmp works great) came > back feb 2000 even though the password expiration says march 20 2005. > > i dont think theres an issue with locating old accounts with pwdlastset the > thing is what's up with a password expiration date of march 20 2005 if the > pwdlastset is feb 2000. this password for pc account should get reset every > 30 days. > > The ping was a great idea, we were planning on doing it. But our dns > records are not so clean so u can ping a pc and get a response but its a > different pc name when you ping -a ip address. DNS scavenging is getting > turned on , but i think the issue may still exist. > > One last point. Can u or cant you expire a computer account in ad? i dont > think you can , i tried to google it , next im callin ms to ask ,.but wanted > to know what u folks opinion on it was. > ----- Original Message ----- > From: "Mulnick, Al" <[EMAIL PROTECTED]> > To: <ActiveDir@mail.activedir.org> > Sent: Tuesday, March 15, 2005 2:10 PM > Subject: RE: [ActiveDir] Can you expire a computer account in AD > > > > He beat me to it ;0) > > > > You may also want to couple that with a simple ping method to validate if > > the machine actually exists or not. Might cross reference it with > DHCP/DNS > > if ping is too much overhead. > > > > Just some thoughts. > > > > Al > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Tomasz Onyszko > > Sent: Tuesday, March 15, 2005 1:55 PM > > To: ActiveDir@mail.activedir.org > > Subject: Re: [ActiveDir] Can you expire a computer account in AD > > > > P West wrote: > > > We are trying to clean up old AD pc accounts. Have used every tool > > > under the sun to come up with the pwdlastset to show old accounts. > > > > > > example > > > One pc says the pwdlast set is feb 2000 when our ad guy looks at > > > password expiration the dates are say march 20 2005. but the > > > pwdlastset date is feb 2000. > > > > > > For some reason the pwdlastset is not updating or at least thats what > > > im thinking. > > > > try to use Joe's oldcmp tool: > > http://www.joeware.net/win/free/tools/oldcmp.htm > > > > > > -- > > Tomasz Onyszko [MVP] > > [EMAIL PROTECTED] > > http://www.w2k.pl > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
