The Active Directory Cleanup Tool finds inactive user and computer accounts in Active Directory. You can choose to disable, delete, export and move inactive accounts to another OU. You should run this tool at least once a month on your Active Directory domain to help keep it secure and clean. You can scan the entire domain or select an OU or group.
To find inactive users click the time frame and click run, default is last 90 days. This will display accounts that have not logged on in at least 90 days (based on the lastLogonTimestamp attribute). When you have a list of stale accounts you can select to disable, move, export and delete them.
To find all inactive computers select the "Inactive Computers" checkbox and click run. Inactive computers are also identified by the lastLogonTimestamp attribute.
You can also find inactive GPOs by clicking on group policy report and selecting the all gpos report.
Learn more:
https://activedirectorypro.com/ad-pro-toolkit/ad-bulk-user-creation-tool/
View all AD Pro Toolkit tools:
https://activedirectorypro.com/ad-pro-toolkit/
Download Free Trial:
https://activedirectorypro.com/download-thank-you/
2 Comments