[vass0922]

Quote:

Originally Posted by GroundZero3

We use ADtoolkit


If you are a scripting guy you can do this

Hey, Scripting Guy!: Yes, Another One...

in that scriptingguy article, its not entirely true any longer

he uses the 'lastLogon' field which was fine in Win2k, but as he notes it is not replicated across domain controllers so you gotta do that long ass script he has.

Since win2k3 domain, it introduced the lastLogonTimeStamp field. while not 100% accurate to see the last logon to NOW, it will give you a good idea of in the last 2 weeks the account has logged on.
So if you want to clean up everything from 3 months old or something, it would be fine