Discussion Locked

Last logon report or Script

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am working on an Active Directory network. I am trying to create a report of stale accounts. Any assistance will be appreciated. Basically, I am trying to query AD to list accounts that have not been used in the last 6 months. I am looking for a csv file format or any format I can scrub and possibly import to sql....

2 replies

by ctmoore1998

The only idea I have for this would be to set security to use a password and to lock accts when password has expired. If you set password duration for 30 days, then if the user acct doesn't change the password it will lock the acct out, unfortunately you have to use active users and accts to check each acct to see if its locked out. The other would be to use licensing as it will show a count of user accesses (I've never tried it) but if you can highlite and copy the license list to say notepadthen in 30 days or so you could do it again and then compare the number of accesses by each user, delinquent accounts the number should remain the same.

by avikin

Thanks for the response. But, I am actually looking for a script or tool that I can run now, in order to see the accounts in our domain that have not been used or logged in past 6 months. I think my network has a lot stale or unused user accounts and I need clean house....

This discussion is closed to new replies.