I archive the departed user's email if needed then delete the account usually with a day or two of the person leaving. Old computer accounts are deleted on a regular basis usually long after the user has departed. ----- Original Message ----- From: "Jon Harris" <[EMAIL PROTECTED]> To: "NT System Admin Issues" <ntsysadmin@lyris.sunbelt-software.com> Sent: Wednesday, November 5, 2008 9:53:43 AM GMT -05:00 US/Canada Eastern Subject: Old computer and user accounts
>From somewhere in my memory I seem to think that old computer or user accounts >should not be deleted. I seem to remember having issues after I did that at >some point in the past but since I now have SCE in my network it would be very >nice to have it discover new machines as they are added. I can't do this with >all the old accounts hanging around in AD. Well I can but you could imagine >all the errors what would be generated. Network is 2003 AD running at 2000 >native with one 2008 DC in the mix. How do you folks handle old accounts do you disable them and place them in a restricted OU or do you delete them? Thanks for your opinions, Jon ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
