Active Directory question

[eeps24]

Were running windows 2003 server environment, is there a tool that searchs out PC's that havent been turned on in 3 months for example. (any time frame). We see machines out there but were not sure if there alive or not. Besides pinging, is there another tool?

We want to clean up our Active Directory.

[GroundZero3]

We use ADtoolkit


If you are a scripting guy you can do this

Hey, Scripting Guy!: Yes, Another One...

[eeps24]

that adtoolkit looks pretty good, do you find it very handy when working with active directory? so this tool will hunt pcs that have been "dead".

thanks

[victor9999]

I Suggest Active Directory Cleaner Perfect Tool to Cleanup Your Active Directory To
Know More Details Visit JiJi Technologies

[vass0922]

Quote:

Originally Posted by GroundZero3

We use ADtoolkit


If you are a scripting guy you can do this

Hey, Scripting Guy!: Yes, Another One...

in that scriptingguy article, its not entirely true any longer

he uses the 'lastLogon' field which was fine in Win2k, but as he notes it is not replicated across domain controllers so you gotta do that long ass script he has.

Since win2k3 domain, it introduced the lastLogonTimeStamp field. while not 100% accurate to see the last logon to NOW, it will give you a good idea of in the last 2 weeks the account has logged on.
So if you want to clean up everything from 3 months old or something, it would be fine

[eeps24]

actually, I realized there are built in commands in windows server that will allow me to do it ... dsquery and dsget will help me clean out inactive computers in AD...
thanks guys