General discussion


Last logon report or Script

By avikin ·
I am working on an Active Directory network. I am trying to create a report of stale accounts. Any assistance will be appreciated. Basically, I am trying to query AD to list accounts that have not been used in the last 6 months. I am looking for a csv file format or any format I can scrub and possibly import to sql....

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

Last logon report or Script

by ctmoore1998 In reply to Last logon report or Scri ...

The only idea I have for this would be to set security to use a password and to lock accts when password has expired. If you set password duration for 30 days, then if the user acct doesn't change the password it will lock the acct out, unfortunately you have to use active users and accts to check each acct to see if its locked out. The other would be to use licensing as it will show a count of user accesses (I've never tried it) but if you can highlite and copy the license list to say notepadthen in 30 days or so you could do it again and then compare the number of accesses by each user, delinquent accounts the number should remain the same.

Collapse -

Last logon report or Script

by avikin In reply to Last logon report or Scri ...

Thanks for the response. But, I am actually looking for a script or tool that I can run now, in order to see the accounts in our domain that have not been used or logged in past 6 months. I think my network has a lot stale or unused user accounts and I need clean house....

Related Discussions

Related Forums