+ 0 Votes Just a minute or two... MAEX 5 years ago Have seen lots of comments, but how about spending a bit of time and search for a couple of scripts to check your AD environment. First script to check last machine account logon to your domain. Second script to check last user logon from particular machine account to your domain. After having these two details you should be able to assess what to delete and what not. The first script should be enough.