veDir] Disabling Inactive Users
lastLogon isn't updated during a simple bind.
joe
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al
Sent: Wednesday, February 23, 2005 9:10 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Disablin
lastLogon isn't updated during a simple bind.
joe
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al
Sent: Wednesday, February 23, 2005 9:10 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Disabling Inactive Users
One o
om: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd
(NIH/CC/DNA)
Sent: Wednesday, February 23, 2005 7:45 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Disabling Inactive Users
James,
I would like to just expand a little on what Gil said about Javel
eStamp for the aging instead of pwdLastSet.
joe
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Singler
Sent: Tuesday, February 22, 2005 4:47 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Disabling Inactive Users
AFAIK oldcmp will gi
and useful.
Todd Myrick
MVP
From: Gil Kirkpatrick
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 22, 2005
4:39 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Disabling
Inactive Users
AFAIK there's no GPO setting to do this.
Most people run a s
On Behalf Of John Singler
Sent: Tuesday, February 22, 2005 4:47 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Disabling Inactive Users
AFAIK oldcmp will give you the lastLogonTimestamp (if you are w2k3
functional) but you can't query directly on that. the -age switch look
AFAIK oldcmp will give you the lastLogonTimestamp (if you are w2k3
functional) but you can't query directly on that. the -age switch looks
at pwdLastSet (it's possible that a user has not changed their password
in +90 days but they login everyday - therefore they are not "inactive").
a manual
Title: Disabling Inactive Users
AFAIK there's no GPO setting to do this. Most people run a
script periodically or use a 3rd part tool like Javelina.
-g
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rogers,
JamesSent: Tuesday, February 22, 2005 1:56 PMTo:
ActiveDir@Mail.A
Title: RE: [ActiveDir] Disabling Inactive Users
I would be careful about using has not logged on in X number of days. Some users my only authenticate against AD thus they would never log on. Try tracking against last password change. I assume you have policy in place that requires user
Personally I haven't seen a GPO for this but I'd like to hear of one if
available.
On my site I/we wrote an administrative script to handle this task that
basically scours the directory and spits out the accounts that haven't been
used on any DC in more than X days. Because of our system process
HI,
Try the following: http://www.joeware.net/win/free/tools/oldcmp.htm.
I think it's not possible to use a GPO to do this. You could however create
a batch file using OLDCMP and schedule it to run each day/week or whenever
you want it
Jorge
-Original Message-
From: [EMAIL PROTECTED]
To
11 matches
Mail list logo
