I'm sure there are many ways to achieve this outcome, but is there an easy way to identify expired computer accounts, i.e. machines that haven't communicated with AD for x months?
~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~