General discussion

Locked

Monitoring user accounts

By cferguson28 ·
How do I run a query of some sort that allows me to find users that have not logged into the domain for at least 30 days? I would like to lock or delete the account(s) after 30 days of inactivity.

This conversation is currently closed to new comments.

1 total post (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Monitoring user accounts

by Shanghai Sam In reply to Monitoring user accounts

Without other software you can built your own tool:
1. Use ?dumpel.exe? from Resource kit to export NT Events to a text file. Make a batch file like this:
C:\program files\rksupport\dumpel.exe -f securityevents.txt -s \\ComputerName -l security -t-d 30
2. After you run this batch file you will obtain the securityevents.txt file.
3. Now you can import this file in Excel or Access and apply filters or queries.
Also you can automate this job with task scheduler and you must change the Event Log Settings: Maximum Log Size and Overwrite Events

Back to Windows Forum
1 total post (Page 1 of 1)  

Operating Systems Forums